Security Guides
Using certificate transparency to find hostnames you forgot
Public certificate transparency logs show which certificates were issued for your domains. Use them to find unknown hosts and unexpected certificates.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Certificate renewal automation with ACME: a practical checklist
How to automate TLS certificate renewal with ACME: challenge types, renewal timing, monitoring and the failure cases that still cause outages.
Oct 18, 20263 min read
Security Guides
Certificate hostname mismatch: why the SAN matters and the CN does not
Browsers and TLS clients match your host name against the certificate SAN list, not the Common Name. How the rules in RFC 9525 work and how to fix a mismatch.
Oct 18, 20264 min read
Security Guides
How to stop expired certificate outages: a checklist
Expired TLS certificates still cause outages. Use this checklist to inventory, assign owners, automate renewal and alert early before a certificate lapses.
Oct 18, 20263 min read
Security Guides
Where CERT/CC came from and what its 45 day window means
CERT/CC began in November 1988 after the Morris worm. Here is how it handles vulnerability reports and what its typical 45 day disclosure timeline means.
Oct 18, 20263 min read
Security Guides
Card testing and card cracking: what to watch for at checkout
Card cracking brute forces missing card values through your payment flow. Signals to watch and controls to add before a bot burns your authorization rate.
Oct 18, 20263 min read
Security Guides
Estimating how many vulnerabilities your scanners both missed
Two scanners and their overlap can estimate how many issues neither found. Learn the capture recapture method, a worked example, and its limits.
Oct 18, 20263 min read
Security Guides
Can't find a company's security contact? Where researchers can turn
No security contact on the site? Steps a researcher can take: security.txt, disclose.io lookup, the right staff member, and a CERT as a fallback.
Oct 18, 20263 min read
Security Guides
Canary tokens: cheap tripwire detection for small teams
Canary tokens are decoy files, keys and links that alert when touched. How they work, where to place them, how to run them and what they cannot catch.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.