Security Guides
What security training do engineering managers actually need?
Engineering managers need security training on risk decisions, not code: priorities, exceptions, fix capacity and how to read a security report.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What should security training for API developers cover?
A topic list for API developer security training, built around the OWASP API Security Top 10 2023, with a suggested order and hands-on exercises.
Oct 19, 20264 min read
Security Guides
Security tool trials: seven myths and the facts
Seven common beliefs about security tool trials, from 'more findings is better' to 'the free trial costs nothing', checked against how trials really go.
Oct 19, 20263 min read
Security Guides
What security testing should a team of 5, 25 or 100 engineers run?
A sizing guide for security testing by engineering headcount: what to run at 5, 25 and 100 engineers, who owns it, and when to add the next method.
Oct 19, 20264 min read
Security Guides
Does an internal app behind a VPN need security testing?
Internal apps behind a VPN still get tested, just lighter. Which methods to run, which to skip, and why a VPN is not a security control for the app itself.
Oct 19, 20264 min read
Security Guides
Security says upgrade, platform says wait: how do you break the standoff?
When security wants a dependency bump and platform fears breakage, settle it with a test branch, a reachability check, and a dated exception.
Oct 19, 20263 min read
Security Guides
Security wants an override and developers say it will break things
When security asks for a dependency override and developers fear breakage, use evidence, a staged rollout and a time-boxed exception rather than a standoff.
Oct 19, 20264 min read
Security Guides
What should you ask before pointing a security tool at your source code?
A security tool reads your code and credentials, so review it like any vendor. Ten questions on data flow, access, storage and exit before you onboard it.
Oct 19, 20263 min read
Security Guides
How do you write a security review comment developers act on?
A short template for security review comments: what is wrong, where, why it matters and the fix, with a severity label so authors know what blocks a merge.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.