DevSecOps
How to Test Your Signing Pipeline End to End
Build a repeatable end-to-end test harness for your signing pipeline that proves artifacts are signed correctly and that verification fails when tampered.
Apr 15, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Interactive Application Security Testing (IAST)
IAST instruments running apps to catch injection flaws and unsafe data flows in real time. Here's how it works, its limits, and where it fits.
Apr 15, 20267 min read
Compliance
Software Transparency Goes Global: Regulatory Developments in 2025
From the EU Cyber Resilience Act to Japan's software security guidelines, governments worldwide are mandating software transparency. A comprehensive overview of the global regulatory landscape.
Apr 15, 20265 min read
Open Source
netty-handler: TLS in Netty and Keeping It Patched
netty-handler is where Netty's TLS lives, which makes it the module scanners flag most. What SslHandler actually does, the hostname-verification gotcha, and the patch cadence to keep.
Apr 15, 20266 min read
Application Security
Runtime Application Self-Protection (RASP)
RASP blocks attacks from inside a running app. Learn how it works, how it differs from a WAF, its limits, top vendors, and where it fits with SAST/SCA.
Apr 15, 20267 min read
AppSec
X.509 Certificates in .NET: System.Security.Cryptography Explained
A practitioner's tour of System.Security.Cryptography.X509Certificates: loading certs safely on modern .NET, chain validation, stores, and the mistakes that quietly disable TLS security.
Apr 15, 20267 min read
Container Security
Kubernetes Secrets
Kubernetes Secrets are base64, not encrypted, by default. Here is how they actually leak, why scanners like Aqua fall short, and how to fix it.
Apr 15, 20268 min read
Open Source
react-native-blob-util: A Security Guide to Safe File and Blob Handling
react-native-blob-util is the maintained successor to rn-fetch-blob. Here is what it does, why the migration matters for security, and how to handle files safely.
Apr 15, 20265 min read
Application Security
SAST vs DAST: Key Differences
SAST reads code before it runs; DAST attacks it while it's live. Here's what each catches, what each misses, and when to run both.
Apr 15, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.