Audio
16 episodes from 5 shows, newest first in each. Press play here, or open an episode on Spotify.
Podcast episodes
RSS feedThe Audit Window
A weekly, plain-spoken show about compliance and audit for the people who have to produce the evidence.
The Audit Window on Spotify · The Audit Window on Apple Podcasts
- S1E3 · · 18 min
GDPR for a small SaaS: the data subject request and the evidence behind it
On a Friday at ten to five, an email arrives with two lines: send me everything you hold about me, and delete my account. The one month clock started when it landed.
- S1E2 · · 18 min
HIPAA for a SaaS vendor: the BAA and the evidence behind it
- S1E1 · · 12 min
ISO 27001 when you already have SOC 2
A buyer asks for an ISO 27001 certificate when you already hold a SOC 2 report. How much of the work do you get to keep?
Ask Safeguard
Rapid-fire answers to the questions buyers and customers ask most, in six to nine minutes.
- S1E5 · · 6 min
AI fixes: how they stay safe
Is it safe to auto-merge dependency fixes, and who approves a pull request that a tool wrote?
- S1E4 · · 6 min
SOC 2 and compliance: what is true today
Is Safeguard SOC 2 compliant, are you FedRAMP authorized, and do you need an SBOM for SOC 2?
- S1E3 · · 7 min
Where does it run? Regions, your own network, air-gapped
Where does your code go when you connect a repo, and can the whole platform run air-gapped or with no AI at all?
- S1E2 · · 7 min
How Safeguard compares with the tools you already run
- S1E1 · · 8 min
What Safeguard costs, plan by plan
Is the free plan a real plan, what do individuals and teams pay, and why does the pricing page say contact us for the big plans? Mira asks the pricing questions buyers ask first and Cal answers from the live safeguard.
The Fix Window
A weekly, plain-spoken show for the people who have to fix supply-chain problems, not just read about them.
The Fix Window on Spotify · The Fix Window on Apple Podcasts
- S1E5 · · 12 min
Three days: how fast to patch a bug that is already being used
A message lands on a Monday: a flaw in something you run has just been added to the known exploited list. You used to have three weeks.
- S1E4 · · 13 min
SOC 2 for startups: what auditors ask for first
A short one for anyone who has just been asked for a SOC 2 report. A big customer has sent a form that says "SOC 2 Type 2 report, yes or no", and there is no security team to hand it to.
- S1E3 · · 19 min
What an AI vendor's filing tells your risk review
- S1E2 · · 16 min
Your AI coding agent is a new log source
- S1E1 · · 16 min
A zero-day has no CVE
A zero-day has no CVE record, no advisory and usually no fix, so a scanner that only matches your software against public feeds has nothing to match.
Patch Monday
A weekly security news briefing in about ten minutes, with one thing to do on Monday morning.
Patch Monday on Spotify · Patch Monday on Apple Podcasts
- S1E1 · · 9 min
Patch the store, rotate the keys, move your agent
CISA put an Adobe Commerce and Magento flaw on its Known Exploited Vulnerabilities (KEV) list on 27 October 2026, and researchers say attackers have been using it since March.
Permission Prompt
A weekly, hands-on show about coding with AI agents: workflows, tips and fair comparisons.
Permission Prompt on Spotify · Permission Prompt on Apple Podcasts
- S1E2 · · 12 min
Your first ten minutes with Safeguard in the editor and the chat
Day one on a new team. Sam installs one extension, signs in, and a warning shows up on a package she didn't choose.
- S1E1 · · 12 min
One afternoon, three approvals: a fix with the Safeguard CLI
Ten to three on a Tuesday. Dana has one critical finding in her repo and a code freeze at five.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.