Open Source
npm pack: How to Publish Without Leaking Secrets
npm pack builds the exact tarball that would be published to the registry. Using it before every publish is the simplest way to avoid shipping secrets.
Apr 21, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
The POJO Class in Java: A Security Guide to Plain Objects
A POJO class in Java looks harmless — just fields and getters — but the moment it becomes a deserialization target it turns into an attack surface. Here is how plain objects go wrong and how to keep them safe.
Apr 21, 20267 min read
DevSecOps
Container Hardening Guide 2025: From Base Image to Production
A practical guide to hardening container images and deployments. Covers base image selection, build-time security, runtime protections, and Kubernetes-specific controls.
Apr 21, 20266 min read
Open Source
react-oidc-context: A Security Guide
react-oidc-context wraps oidc-client-ts in React hooks for SPA authentication. Here is how to wire it up without leaking tokens or trusting the wrong callback.
Apr 21, 20266 min read
AppSec
Free Web Security Scanners: What to Expect From the Free Tier
What a free web security scanner will and won't catch, how the free tiers of popular tools are actually limited, and when you need to pay for real coverage.
Apr 21, 20265 min read
Breach Analysis
Harrods Cyber Attack: The UK Retail Sector Under Sustained Assault
Harrods became the third major UK retailer hit by cyber attacks in weeks, following M&S and Co-op. The pattern points to coordinated campaigns targeting retail.
Apr 21, 20266 min read
Vulnerability Analysis
Commvault CVE-2025-34028: SSRF to RCE in Enterprise Backup Software
A critical SSRF vulnerability in Commvault Command Center allowed unauthenticated attackers to achieve remote code execution on backup infrastructure. CISA added it to the KEV catalog.
Apr 21, 20265 min read
Container Security
Multi-Stage Docker Build Security in 2026
Multi-stage builds are the right way to ship secure container images, but the security benefits depend on getting the stage boundaries right. A guide for 2026.
Apr 21, 20267 min read
SecOps
Security Analytics: From Raw Events to Decisions
Most security data pipelines stop at dashboards nobody acts on. The four stages that turn scanner output and logs into decisions, and the metrics that survive contact with a CFO.
Apr 21, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.