Security Guides
Secure-by-design AI agent: a one-page checklist
Twelve questions to answer before an AI agent ships: inputs, access, actions, identity, approvals, logging, testing, shutdown, ownership and review.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you prove your build environment is secure to a government buyer?
The CISA form listed six actions for secure development and build environments. For each, a plain meaning and the evidence a buyer or assessor can inspect.
Oct 18, 20263 min read
Security Guides
Secure Boot, Trusted Boot and Measured Boot: what each one does
Secure Boot checks the bootloader, Trusted Boot checks the kernel and drivers, Measured Boot records hashes for a remote check. Here is what each proves.
Oct 18, 20263 min read
Security Guides
Secure Boot certificates expiring in 2026: what to check on devices
Four Microsoft Secure Boot certificates reach their 2011 expiry dates in 2026. Devices still boot, but may stop getting boot-level fixes. What to check.
Oct 18, 20263 min read
Security Guides
What metrics show a secrets management program is working?
Track a few signals for secrets: time to revoke, share of long lived credentials, scanning coverage and rotation. What to measure and what to skip.
Oct 18, 20263 min read
Security Guides
Found secrets in a target's git history? Rotate first, rewrite later
Leaked keys in a repository's history stay valid until revoked. How to scan during diligence, what to ask the target, and why rotation beats rewriting.
Oct 18, 20263 min read
Security Guides
Secrets in CI test logs and artifacts: a cleanup checklist
Test output, crash dumps, HTTP traces and snapshots can contain tokens and personal data. Where it leaks and how to scrub it before you upload it.
Oct 18, 20263 min read
Security Guides
Secrets leak in issues and pull requests too, not just code
People paste tokens into issues, pull request comments and wikis. What GitHub secret scanning covers beyond code, and how to respond when one appears.
Oct 18, 20263 min read
Security Guides
Someone pasted a secret in Slack or a ticket: what do you do?
Deleting a chat message does not undo exposure. Revoke the secret, replace it, check usage, then fix the habit that put it there. Steps included.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.