Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Spark redacts config values matching a regex from the UI and logs. The default pattern is narrow, so custom names can leak. Here is how to check yours.
Spark's docs say any user who can list pods in the namespace can see a Spark application's authentication secret on Kubernetes. Tighten RBAC accordingly.
SBOMs captured at different lifecycle stages hold different data. Learn how to tell which kind you got and what each can and cannot answer.
A way to sort dependency compromise tabletop findings into tool, process, knowledge and ownership gaps so each one gets a fix that fits its cause.
A short release day checklist for one-person npm and PyPI packages: accounts, workflow, artifact contents, publishing and watching. Each step has a guide.
A solo developer can keep vulnerability alerts under control with one fixed weekly slot, three filters, and a rule for what gets ignored. Here is the loop.
Snowflake's PyPI artifact repository role is granted to PUBLIC by default, per its docs. How to check it, and what a packages policy can add.
A practical plan for a small healthcare software team facing a first hospital review: four habits, a one week setup and honest wording for gaps.
Small changes are easier to review for security, and DORA research backs working in small batches. What to do in practice, and where the idea has limits.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
