Compliance
In-depth guides and analysis on compliance from the Safeguard engineering team.
304 articles
TSA Surface Transportation Cyber NPRM: From Directives to Rule
TSA's November 2024 Enhancing Surface Cyber Risk Management NPRM would formalize what pipeline and rail SDs already require. Operators should prepare now.
DORA Compliance for Fintech Engineering Teams
DORA has applied since January 2025. For engineers that means ICT asset inventories, 4-hour incident classification, TLPT, and a register of every software supplier.
Software Transparency Goes Global: Regulatory Developments in 2025
From the EU Cyber Resilience Act to Japan's software security guidelines, governments worldwide are mandating software transparency. A comprehensive overview of the global regulatory landscape.
Node.js Licensing Explained: The MIT Core and Its Bundled Dependencies
Node.js licensing looks simple until you count the bundled components. Here is what the MIT-licensed runtime actually obligates you to, and where the real compliance work hides.
How Does Software Licensing Work? A Practical Guide for Developers
Software licensing works by granting usage rights under specific terms. Here is how open-source and commercial licenses differ, and how to stay compliant in your dependency tree.
Can You Use Apache 2.0 and MIT Licensed Code Commercially?
Yes, you can use Apache License 2.0 and MIT licensed code in commercial products. Here is exactly what each license requires from you, and where teams still get it wrong.
The EU Cyber Resilience Act Explained for Software Vendors
What the EU CRA actually requires from software vendors — SBOMs, vulnerability handling, CE marking, timelines through 2027, and penalties up to EUR 15M.
EU AI Act Enforcement Begins: 2026 Reality Check
A 2026 reality check on EU AI Act enforcement: which obligations are active, what regulators expect, and the technical evidence enterprises must produce.
Secure by Design Pledge: Reading the 2026 Progress Reports
More than 250 manufacturers have signed CISA's Secure by Design pledge. We read the public progress reports to see who is actually moving on the seven goals.
CRA Conformity Assessment: Choosing Between Modules A, B+C, and H
The CRA offers three conformity routes: Module A self-assessment, Module B+C type examination plus production conformity, and Module H quality management system audit.
CISA KEV Catalog Growth Analysis 2025-2026
A data-grounded analysis of CISA Known Exploited Vulnerabilities catalog growth through 2025 and 2026, and the operational implications for defenders.
California SB-327 IoT Security Enforcement Update
A 2026 enforcement update on California SB-327, the IoT security statute that set a national precedent, and what manufacturers and integrators need to know.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.