Security Guides
Azure Functions: managed identity or connection string?
Managed identities and Key Vault references keep secrets out of Azure Functions settings. Here is how app settings, Key Vault and identity compare.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Azure Functions access keys are not user authentication
Function keys make an Azure Functions endpoint harder to hit, but Microsoft says real security needs positive authentication. Here are the options.
Oct 18, 20263 min read
Security Guides
Azure activity logs, resource logs and Entra logs: which to enable
Azure has activity logs, resource logs and Microsoft Entra logs. Learn what each shows, which are on by default, and where diagnostic settings come in.
Oct 18, 20263 min read
Security Guides
AWS service control policies: what they can and cannot restrict
SCPs set the maximum permissions for member accounts in AWS Organizations. Learn what they never grant, who they skip, and how to test before attaching.
Oct 18, 20264 min read
Security Guides
AWS root user for a small team: who holds what, and how to watch it
A small team guide to the AWS root user: group email, split recovery channels, no access keys, and an alert that fires when anyone signs in as root.
Oct 18, 20263 min read
Security Guides
How AWS decides allow or deny: IAM policy evaluation in plain words
AWS combines identity policies, resource policies, boundaries and SCPs when judging a request. Learn which union, which intersect, and why deny wins.
Oct 18, 20263 min read
Security Guides
Automatic or manual region failover: which should you use?
Automatic failover is fast but acts on false alarms; manual is slower but deliberate. Compare them and see why many teams automate only the steps.
Oct 18, 20264 min read
Security Guides
An automatic updates policy for schools and small nonprofits
Install updates fast, turn on automatic updates, and handle the devices that cannot update. A short policy for organizations without a patching team.
Oct 18, 20263 min read
Security Guides
Automatic updates on a developer Mac: what to turn on
Which macOS automatic update options to enable on a developer laptop, what each does, and how to handle toolchain breakage without turning updates off.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.