Developer Tools
Cost per task beats cost per token for AI unit economics
Price per million tokens hides retries, tool loops and reasoning. Track cost per completed task instead, and here is how to define and compute it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
What triggers a CORS preflight request, and how to cache it
A preflight is an OPTIONS check the browser sends before some cross-origin requests. Learn what triggers one, what the server must answer and how caching works.
Oct 18, 20263 min read
Developer Tools
CORS with cookies: why the wildcard origin stops working
When a cross-origin request includes cookies, Access-Control-Allow-Origin cannot be a wildcard. Here are the exact rules and how to set them safely.
Oct 18, 20263 min read
Developer Tools
Correlation ID vs trace ID: what is the difference?
A correlation ID groups log lines for one request; a trace ID adds parent and child links. When each is enough, and how to log both in one field.
Oct 18, 20263 min read
Developer Tools
Cookie attributes decision guide: __Host-, Secure and SameSite
Which cookie attributes to set for a session cookie: Secure, HttpOnly, SameSite and the __Host- prefix, plus what each does not protect against.
Oct 18, 20263 min read
Developer Tools
Continuous batching and PagedAttention explained for team servers
Why serving several users from one GPU needs batching, and how PagedAttention reduces KV cache waste. What the vLLM paper claims and what to test yourself.
Oct 18, 20263 min read
Developer Tools
Content Security Policy basics: a safe way to roll one out
A Content Security Policy limits which scripts a page can run and blunts XSS. How to start in report-only mode and move to a nonce-based strict policy.
Oct 18, 20263 min read
Developer Tools
Content scripts and isolated worlds: how extensions touch web pages
Content scripts run inside web pages but in an isolated world. Learn what they can see, what they cannot, and why it matters when you review an extension.
Oct 18, 20263 min read
Developer Tools
Contract tests as a guard against dropped security checks
How consumer driven contract tests can catch a service that quietly stops requiring authentication or changes an error shape, without end to end tests.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.