Security Guides
How do you read a CSP violation report from your store?
A CSP report names the blocked URL, the directive and the page. Learn the key fields, which reports to ignore and which to treat as a possible attack.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you put a legacy server behind a jump host?
A jump host gives a legacy server that cannot do modern login a single guarded door. Steps to set one up, what to log, and the mistakes that defeat it.
Oct 19, 20264 min read
Security Guides
How do you push back on a pen test finding you disagree with?
Disagree with a pen test finding using evidence, not opinion: reproduce it, name the exact claim you dispute, and ask the tester to confirm or revise it.
Oct 19, 20264 min read
Security Guides
How do you remove a malicious package version from your internal mirror?
Removing a bad version from a mirror is the first step, not the last. Here is a runbook covering blocking, cache purge, lockfile search and rebuild.
Oct 19, 20263 min read
Security Guides
How do you protect your build pipeline with three settings?
Three settings that protect a small team build pipeline: read only workflow tokens, actions pinned to commits and a protected main branch, with steps.
Oct 19, 20264 min read
Security Guides
How do I protect GitHub workflow files with CODEOWNERS?
Assign an owner to .github/workflows and the CODEOWNERS file itself, then require code owner review in branch protection. Setup steps and common gaps.
Oct 19, 20264 min read
Security Guides
Which client site patches need doing today and which can wait?
Patch today if a flaw is known to be exploited, reachable on the site and exposed. Everything else can follow a schedule. A simple triage table.
Oct 19, 20263 min read
Security Guides
How do you prevent injection flaws? Defenses in order of strength
Keep data separate from commands: safe APIs first, then allow-list validation, then escaping as a last resort. A ranked guide with scanner checks.
Oct 19, 20264 min read
Security Guides
How do you explain a worse vulnerability quarter to leadership?
When vulnerability numbers get worse, explain the cause, show what is under control, and make one clear ask. A short script for a hard quarterly review.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.