Security Guides
How should you configure TLS and certificates in Kestrel?
Leave Kestrel SslProtocols at None so the OS picks the protocol, supply a real certificate in production, and keep PFX passwords out of appsettings.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you keep triage decisions portable if you switch scanners?
Your accepted risks and false positive calls are an asset. How to store them as files you own so a scanner switch, either way, loses nothing.
Oct 19, 20263 min read
Security Guides
How do you keep your Android game signing key safe? Play App Signing
Play App Signing separates the upload key from the app signing key. Why that helps game studios if a key is lost or leaked, and how to set it up.
Oct 19, 20264 min read
Security Guides
How do you keep vulnerability data current in a restricted network?
A runbook for refreshing scanner data without internet access: pull, verify, transfer, import, and measure staleness against a stated budget.
Oct 19, 20263 min read
Security Guides
Which files should you archive for every firmware release?
A firmware release record needs more than the binary. Here are eight artifacts a hardware startup should archive so it can answer questions years later.
Oct 19, 20263 min read
Security Guides
Why should Terraform module trees stay flat and take inputs?
HashiCorp advises one level of child modules and passing dependencies in as inputs. Why that makes shared infrastructure code easier to review and change.
Oct 19, 20264 min read
Security Guides
What should a security automation never put in a chat alert or ticket?
Never include credentials, customer data or exploit detail in automated alerts. A do and do not table, plus how to link to detail instead of copying it.
Oct 19, 20263 min read
Security Guides
Should a copied CI template run on a self-hosted runner?
Public CI templates normally use hosted runners. Pointing one at your own machines raises the stakes, so here is when to do it and how to limit the damage.
Oct 19, 20263 min read
Security Guides
How do you keep SBOM and finding history after a repo move?
Renaming or merging repos can orphan SBOM history, suppressions and ownership in your security tool. Plan an identity mapping so records carry over.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.