Security Guides
What is shadow automation, and how do you find it?
Shadow automation is any bot, macro or workflow built without IT or security knowing. Here is where it hides and a simple way to find it in a week.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What is security.txt and should a vendor publish one for customers?
What is security.txt? It tells researchers how to report a flaw to you. What RFC 9116 requires, what to include and how to keep it from going stale.
Oct 19, 20264 min read
Security Guides
What is scan freshness and how do you measure it?
Scan freshness is how old your latest completed scan is for each asset. Learn how to define it, report it as a distribution and set limits by risk.
Oct 19, 20264 min read
Security Guides
What is RPA, and what security risks does it bring?
RPA bots imitate people using application screens. Here is what that means for credentials, access, change control and audit trails, in plain terms.
Oct 19, 20264 min read
Security Guides
What is remediation throughput and how do you measure it?
Remediation throughput is how many vulnerability fixes reach production per period. Learn what to count, how to split it by fix type, and what to avoid.
Oct 19, 20264 min read
Security Guides
What is RDAP, and how does it differ from WHOIS?
RDAP is the web based successor to WHOIS for looking up domain registration data. What it returns, how to use it and what it means for your own records.
Oct 19, 20264 min read
Security Guides
What is RBAC role explosion and how do you avoid it?
Role explosion is when an RBAC system accumulates so many roles that nobody can test or audit them. Why it happens, what it breaks and how to contain it.
Oct 19, 20264 min read
Security Guides
What is Patch Tuesday and when does it happen?
Patch Tuesday is Microsoft's monthly security update, released on the second Tuesday. See the dates, the other names for it and a weekly routine for ops.
Oct 19, 20264 min read
Security Guides
What are pushed authorization requests (PAR) and when do you need them?
PAR lets an OAuth client send its authorization request straight to the server, not through browser URLs. What it protects, who needs it, and how it works.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.