Defensive guides, written to be used.
Checklists and playbooks for people who want to avoid scams, and for people who run servers. They are general best-practice guidance, not claims about our products; where a guide mentions a product, the linked capability page is authoritative.
One rule for payment scams, and where to go next
Payment and UPI scams: a field checklist
Collect requests, refund tricks and "pay to receive" — how payment scams work and the few rules that defeat almost all of them.
Why a "support agent" wants you to install an app
Screen-sharing and remote-control apps are legitimate tools. In a scammer's hands they hand over your phone. How the scam runs and how to get out of it.
Reading a link before you tap it
Phishing lives on domains that are almost right. A two-minute skill: how to find who actually owns a link.
By who they are for
> For people and families
Payment and UPI scams: a field checklist
Collect requests, refund tricks and "pay to receive" — how payment scams work and the few rules that defeat almost all of them.
Why a "support agent" wants you to install an app
Screen-sharing and remote-control apps are legitimate tools. In a scammer's hands they hand over your phone. How the scam runs and how to get out of it.
Reading a link before you tap it
Phishing lives on domains that are almost right. A two-minute skill: how to find who actually owns a link.
QR code payments: check before you pay
Sticker swaps, "scan to receive" codes and QR phishing in email — what a QR code can hide and how to check it.
Voice-clone calls: a family code-word plan
A cloned voice removes the doubt that would make you check. A five-minute family plan that works without any software.
> For people who run servers
SSH brute force: harden first, then watch
Every internet-facing SSH port is guessed at continuously. The configuration that makes guessing pointless, and what a brute-force alert does and does not mean.
Port scans and exposed services: shrinking a server's attack surface
Scanners find every open port within minutes. Inventory what is listening, close what does not need to be public, and put the rest behind something.
The first hour on a Linux server you think is compromised
A calm, ordered triage checklist: preserve, look, contain — without destroying the evidence you need.
> For security and IT teams
Ransomware readiness for small teams: backups you have restored
The only backup that counts is one you have restored. A practical plan for small offices and server operators, before anything happens.
Connecting AI agents to company systems without handing over the keys
Prompt injection turns every document an agent reads into a possible command. Scopes, approvals and audit trails that limit the damage.
Guidance, not product claims
Guides describe defensive practice that works with or without our software. What our products do is on the capability pages, with each feature's state.
Patterns, not incidents
We describe how attacks generally work. We do not cite incidents, victims or statistics we cannot source.
Original research: none yet
When we have findings from our own analysis worth sharing, they will be published here, with method and data.
ServerGuard guides from 2025
Operations guides written in 2025 for Safeavio ServerGuard, kept for reference. Product statements in them may be out of date.