Security Guides
Segmenting IT and OT networks: DMZ, zones and conduits in practice
How to separate IT and OT networks: a DMZ between them, zones and conduits for OT assets, and deny by default rules, drawn from CISA guidance.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Security whitepaper or trust page: which do you actually need?
A decision guide for small and growing companies: when a short trust page is enough, when a security whitepaper adds value, and how to keep both current.
Oct 18, 20263 min read
Security Guides
security.txt for game studios: a short setup guide
Publish a security.txt file so researchers know how to report a bug in your game. Required fields, location, expiry and what to do after reports arrive.
Oct 18, 20263 min read
Security Guides
security.txt and a disclosure page: setup in one afternoon
How to publish a security.txt file and a short vulnerability disclosure page: required fields, where the file goes, and what the policy should say.
Oct 18, 20263 min read
Security Guides
Where to spend a small security training budget first
With little money, spend on protected time, an easy reporting path, one hands on developer lab and a tabletop before any paid platform. A ranked list.
Oct 18, 20263 min read
Security Guides
A security testing calendar for a small SaaS team
What security testing to run per commit, per release, per quarter and per year for a small SaaS team, and what to skip until you have more people.
Oct 18, 20263 min read
Security Guides
Scan coverage: how to define it so 100 percent means something
A coverage figure is only as good as its denominator. Define what counts as an asset, what counts as scanned, and how fresh each scan must be.
Oct 18, 20263 min read
Security Guides
Security risk vs safety risk management for medical devices
FDA wants a separate security risk assessment alongside the safety one. Security scores exploitability, not probability, and the two must feed each other.
Oct 18, 20264 min read
Security Guides
A security portfolio hiring managers can actually check
What to put in a security portfolio so a hiring manager can verify your skill in ten minutes: write ups, small tools, threat models and safe disclosure.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.