Security Guides
How do you secure your DNS provider account and API tokens?
Whoever can edit your DNS can redirect your site and mail. Lock down the DNS provider login, roles and API tokens with this practical checklist.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How should you secure WordPress admin logins in practice?
Use unique long passwords, two step sign in, named accounts, HTTPS for the dashboard and few Administrators. Steps drawn from the official hardening guide.
Oct 19, 20263 min read
Security Guides
How do you secure an anti-corruption layer between old and new systems?
An anti-corruption layer translates between legacy and new systems. Secure it with strict validation, narrow permissions and its own scanning.
Oct 19, 20263 min read
Security Guides
How do you secure a shared Jupyter server for an ML team?
Access to a Jupyter server is access to run code. Here are the defaults to keep, the exposure to avoid and a short hardening list for shared ML servers.
Oct 19, 20263 min read
Security Guides
How to secure a phone hotspot before tethering a laptop
Steps to lock down a phone hotspot before you tether a work laptop: password, WPA3 where offered, names, device limits and what to check afterwards.
Oct 19, 20263 min read
Security Guides
How do you score severity for a vulnerability reported to you?
As the vendor you assign the CVSS base score and publish the vector. Here is how a small team does it, which metrics trip people up, and what CVSS omits.
Oct 19, 20264 min read
Security Guides
How do you score a dependency compromise tabletop exercise?
A simple scoring rubric for a dependency compromise tabletop: six dimensions, anchored 0 to 3 levels, and how to turn scores into follow-up work.
Oct 19, 20264 min read
Security Guides
How do you say 'I do not know' in a security meeting?
Saying 'I do not know' works when you add what you do know, how you will find out, and by when. Phrases and examples for security conversations.
Oct 19, 20264 min read
Security Guides
How do you run old and new systems in parallel without doubling risk?
Keep exposure down while legacy and new code run together: one entry point, shared logging, a shrinking route list and clear cutover dates.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.