DevSecOps
In-depth guides and analysis on devsecops from the Safeguard engineering team.
100 articles
SBOMs in the CI/CD Pipeline: From Generation to Actually Useful
Generating an SBOM is easy. Making it answer 'are we affected by this CVE, and where?' in seconds is the part most teams skip. Here is how to build SBOMs into your pipeline so they earn their keep.
Jenkins Pipeline Security: Hardening the Controller and Your Builds
Jenkins is a favorite target because the controller holds every credential and runs arbitrary Groovy. This guide covers CVE-2024-23897, the plugin attack surface, credential handling, ephemeral agents, and adding scanning.
Vulnerability Prioritization: How to Triage What Actually Matters
CVSS alone is a poor priority signal. A 2026 guide to prioritizing vulnerabilities with EPSS, CISA KEV, SSVC, and reachability — so you fix the few that are exploitable, not the thousands that aren't.
Python Code Fixers for Security: What They Catch and Where They Stop
A Python code fixer can auto-remediate a real slice of security and quality issues, but only if you know which findings are safe to fix automatically. Here is how the tooling works and how to wire it up.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.