Security Guides
How do you tier low-code apps by risk? A three-tier model
A simple personal, team and sensitive tiering for low-code apps, with the questions that place each app and the level of review each tier needs.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Three FAQ answers on how you prioritize vulnerabilities
Draft three short, truthful FAQ entries for a trust page about vulnerability prioritization, reachability and exploitation signals, written for customers.
Oct 19, 20264 min read
Security Guides
How do you give a three-point estimate for a security fix?
Give best, likely and worst case hours for each security task, combine them with a simple formula, and report a range. A worked example for engineers.
Oct 19, 20264 min read
Security Guides
How long does a base image fix take to reach production?
A base image fix runs on three clocks: upstream release, your rebuild and your deploy. Measure each separately to find where the delay actually sits.
Oct 19, 20264 min read
Security Guides
How do you train architects and tech leads in secure design?
Secure design training for architects and tech leads centres on threat modeling habits. Four questions, a repeatable format and the anti-patterns to avoid.
Oct 19, 20264 min read
Security Guides
Can a small team threat model a feature in 30 minutes?
Yes. Ask four questions at a whiteboard before you build: what are we working on, what can go wrong, what will we do, did we do enough. Steps inside.
Oct 19, 20264 min read
Security Guides
How do you run a 30-minute security review of an AI-built prototype?
A timed 30-minute review script for AI-built prototypes: scope, auth, data access, dependencies, secrets and deploy settings, with a pass or fix verdict.
Oct 19, 20263 min read
Security Guides
How do you embed third-party widgets on a static site safely?
Videos, maps and chat widgets run outside your control. Use iframe sandbox, lazy loading, a referrer policy and click-to-load. Attributes explained.
Oct 19, 20264 min read
Security Guides
The bad dependency already shipped to customers: what now?
What to do when a compromised dependency is inside a release customers already installed: scope the builds, ship a fix, and communicate confirmed facts.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.