Security Guides
How do you vet store apps and plugins before installing them?
A short vetting routine for ecommerce store apps and plugins: permissions, maintainer history, update cadence, data access and a removal plan.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you vet a third-party form handler for a static site?
Before pointing a contact form at a hosted handler, check data flow, spam controls, access and exit options. A seven-point checklist for static sites.
Oct 19, 20264 min read
Security Guides
How do you vet a new open source dependency before adding it?
A practical pre-adoption checklist for open source libraries: need, license, health, vulnerabilities, provenance and fit, plus a reply for customers.
Oct 19, 20264 min read
Security Guides
How do you verify WordPress core files with wp core verify-checksums?
Run wp core verify-checksums to compare core files with WordPress.org's MD5 list, spot injected or edited files, and know what the command does not cover.
Oct 19, 20263 min read
Security Guides
How do you verify a postmortem action actually fixed the gap?
Write a verification step for each action: a test, a metric or a drill that proves the control works. Examples for pinning, release delays and secrets.
Oct 19, 20263 min read
Security Guides
How do you verify a fix really closed a vulnerability finding?
A finding is closed only when a rescan of the shipped artifact no longer reports it. Use this six-step checklist to verify the fix and record the proof.
Oct 19, 20263 min read
Security Guides
How do you verify a downloaded dataset with checksums?
Hash every dataset file when you accept it, store the values and compare on each reuse. Includes what a popular loader checks by default and what it skips.
Oct 19, 20264 min read
Security Guides
How do you validate a vulnerability report before you fix it?
A step by step way for a small team to reproduce, scope and confirm a reported vulnerability before writing a fix, with a checklist and possible outcomes.
Oct 19, 20264 min read
Security Guides
How do you use the CISA KEV catalog across many environments?
Match KEV entries to your component inventory, find every deployment, and fix exposed ones first. A five step routine app teams can run weekly.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.