Security Guides
How do you back up break-glass credentials and prove they work?
When your secrets manager or identity provider is down, break-glass accounts get you in. How to store, protect, test and rotate them safely.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What proof of branch protection should a software partner show you?
Branch protection controls who can change production code and how. Here is the evidence to request, what each rule proves and what it leaves open.
Oct 18, 20263 min read
Security Guides
Branch protection and admins: who can bypass your rules by default
GitHub branch protection exempts admins unless you tick one box. Here is what the setting does, what admins can still do, and how to close the gap.
Oct 18, 20263 min read
Security Guides
What happens to running automations when you block a connector?
Blocking a connector in a low-code data policy stops new builds and can suspend existing flows. What to expect, how long it takes, and how to plan it.
Oct 18, 20263 min read
Security Guides
Block legacy authentication in Entra with a report only rollout
Legacy protocols skip MFA. How to find legacy sign ins in Entra logs, build a block policy in report only mode, and handle service accounts.
Oct 18, 20263 min read
Security Guides
Black Basta advisory: email bombing and fake IT calls explained
The joint FBI, CISA, HHS and MS-ISAC advisory on Black Basta describes spam floods followed by fake help desk calls. What to change for staff and systems.
Oct 18, 20263 min read
Security Guides
Do Bitbucket Cloud merge checks block a merge or only warn?
Bitbucket Cloud merge checks cover approvals, builds, tasks, and branch age. Some only warn and Premium can block. How to set them up and what to choose.
Oct 18, 20264 min read
Security Guides
How do Bitbucket Cloud branch permissions work with patterns and overlap?
Bitbucket Cloud branch permissions limit write and merge access by name or pattern, and overlapping rules all apply. Set pull request only merges on main.
Oct 18, 20264 min read
Security Guides
Bitbucket Cloud app passwords are retired: how to move to API tokens
Atlassian is replacing Bitbucket Cloud app passwords with scoped API tokens. Steps to find old credentials, create expiring tokens, and fix broken jobs.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.