Security Guides
CIS Controls IG1 explained for small organizations
What Implementation Group 1 of the CIS Controls is, who should start there, and how a small school or nonprofit can use it as a plain checklist.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Chrome Web Store single purpose and data use rules, for users
Chrome Web Store policies require one clear purpose and limit data use. Learn what they promise users and use them as a checklist before you install.
Oct 18, 20263 min read
Security Guides
Chrome extension site access: on click, specific sites or all sites
Which site access setting to pick for a Chrome extension: on click, on specific sites or on all sites, with examples of what each means for your data.
Oct 18, 20263 min read
Security Guides
Limit extensions with runtime_blocked_hosts and blocked_permissions
Two Chrome ExtensionSettings controls let admins keep extensions away from sensitive sites or stop risky permissions. How they work and where they stop.
Oct 18, 20263 min read
Security Guides
Manifest V2 is gone from Chrome: what it means for your extensions
Chrome has disabled Manifest V2 extensions and removed the rest from the Web Store. Here is the timeline and what to check on your own machines.
Oct 18, 20263 min read
Security Guides
Chrome extension permission warnings decoded
What Chrome's extension permission warnings say, such as reading browsing history or clipboard data, and which ones should make you stop and think.
Oct 18, 20263 min read
Security Guides
Choosing a password hashing algorithm: Argon2id, scrypt, bcrypt, PBKDF2
Which password hashing algorithm to pick and with what settings, per OWASP: Argon2id first, then scrypt, bcrypt for legacy, PBKDF2 where FIPS is required.
Oct 18, 20263 min read
Security Guides
How to choose a vulnerable practice app for a developer workshop
Match the practice app to your stack, time and audience. A short set of criteria for picking a deliberately vulnerable app for developer training.
Oct 18, 20263 min read
Security Guides
Checklist: verify an LLM's security finding before acting on it
Seven checks to run on any security finding an LLM reports: find the code, reproduce the path, test the fix, check scope, and record the decision.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.