Security Guides
What is a tech lead's role in a secure SDLC?
A tech lead sets the engineering habits that make security routine: who reviews what, which designs need a second look, and what a good pull request is.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What is a service catalog and why does vulnerability work need one?
A service catalog lists each service with owner, repo, tier and runtime locations. It turns a component finding into a named team and a rollout list.
Oct 19, 20263 min read
Security Guides
What is a security.txt file, and why should a software vendor have one?
security.txt is a small public file that tells researchers how to report a vulnerability. Here is what it holds, where it lives and how to check one.
Oct 19, 20263 min read
Security Guides
What is a registry lock, and does your company domain need one?
A registry lock adds a second layer of protection above your registrar account. What it blocks, how it differs from a transfer lock, and who should ask.
Oct 19, 20264 min read
Security Guides
What is a paved road in security, and is it a guardrail?
A paved road is the supported, pre-secured way to build and ship. A guardrail stops one risky action. Here is how the terms differ and fit together.
Oct 19, 20264 min read
Security Guides
What is a normal EPSS score? Mean, median and base rate
FIRST says the median EPSS score is near 0.7 percent and the mean near 2.8 percent. Why most scores sit near zero, and why 50 percent is a poor threshold.
Oct 19, 20264 min read
Security Guides
What is a hybrid estate in vulnerability management?
A hybrid estate mixes on premises servers, cloud workloads and containers. What that means for app teams chasing one vulnerability in many places.
Oct 19, 20263 min read
Security Guides
What is a generated API client, and who is responsible for it?
A generated API client is source code written by a tool from an OpenAPI file. Definitions, the parts involved and who owns the security of each part.
Oct 19, 20263 min read
Security Guides
What is a DNS zone transfer (AXFR), and should you block it?
A zone transfer copies a whole DNS zone between servers. Learn what AXFR exposes, who should be allowed to ask and how to test your own name servers.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.