Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Privacy Pass lets a device prove it passed a check without saying who it is. How RFCs 9576 to 9578 work, where tokens replace CAPTCHAs, and their limits.
ACP is the open Stripe and OpenAI standard for agent checkout: five checkout endpoints, single use payment tokens, signed requests, and the risks.
Security Insights is an OpenSSF YAML file where projects self-report security contacts, policies, releases and tools. Here is the v2 schema and its uses.
Run one open source OIDC identity provider, sign apps in with the code flow and PKCE, gate apps without logins at the proxy, and make passkeys the MFA.
Boot Guard and Platform Secure Boot check firmware in hardware before UEFI runs, using an OEM key fused into the chip. How they work and how to check yours.
An e-bike is a bicycle plus a brushless motor, a lithium-ion pack with a BMS, a controller and firmware. The build steps, safety rules and app pairing.
A hearing aid is a tiny DSP computer: microphones, a sound processor, a receiver and a cell, running fitted firmware and Bluetooth. How each part is made.
Phones announce themselves in Wi-Fi probe requests. How sensors count and track them, what MAC randomisation fixes, and what it still leaves exposed.
Oblivious HTTP splits who you are from what you ask: a relay sees your IP but not your request, a gateway sees the request but not you. How it works.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
