Supply Chain Security
In-depth guides and analysis on supply chain security from the Safeguard engineering team.
100 articles
Redis and Valkey Release History: 2009 to Redis 8 and Valkey 8
Redis began in 2009, went from BSD to RSALv2 and SSPLv1 in 2024 and added AGPLv3 with Redis 8. Valkey forked 7.2.4 under BSD. Versions, licences, defaults.
Apache HTTP Server Release History: NCSA httpd to 2.4 and Security
Apache httpd grew from NCSA httpd patches in 1995 to the 2.4 branch, the only one still patched. MPMs, TLS, HTTP/2 and how security fixes ship, by date.
Docker Engine Release History: 0.1 to 29.x, Moby and the Security Model
Docker Engine went from 0.1 in March 2013 to 29.9.2 in October 2026. Every era, how support works today, and how the daemon security model fits together.
How a Submarine Is Built and Maintained: Hulls, Sonar, Software, Docks
Submarines are built from welded steel hull sections and outfitted modules, run software on commercial computers, and need dry docks to stay at sea.
DECT and DECT NR+ Explained: Cordless Radio, Security and 5G IoT
DECT is the ETSI cordless radio behind phones and headsets; NR+ is its 5G mesh IoT successor. How both work, how they are secured and what to check.
Arm CCA Explained: Realms, the RMM, Granule Protection and Attestation
Arm CCA runs VMs in realms the hypervisor cannot read, enforced by granule protection checks, run by the RMM and proved by a two layer attestation token.
nginx Release History: Mainline, Stable, TLS, HTTP/3 and Advisories
nginx ships an odd-numbered mainline and one even-numbered stable branch a year. How releases, TLS and HTTP/3 support and security advisories really work.
curl Release History: httpget to curl 8, TLS Backends and Security
curl began as HttpGet in 1996, became curl 4.0 in March 1998 and reached 8.23.0 in October 2026. Every era, TLS backend, removal and security rule explained.
PostgreSQL Release History: SCRAM, Row-Level Security and Support Dates
PostgreSQL ships a major version yearly with five years of fixes. Every version's dates, when SCRAM, row-level security and OAuth landed, what to check.
GTP Explained: GTP-C, GTP-U, Roaming Interfaces and GTP Firewalls
GTP carries mobile data in tunnels between core nodes on UDP 2123 and 2152. How GTP-C and GTP-U work, why roaming is risky and what GTP firewalls do.
ONIE Explained: Bare-Metal Switch Provisioning and Secure Boot
ONIE is the small Linux install environment on bare-metal switches. How it finds a NOS installer, its modes, updates and what ONIE secure boot verifies.
Node.js Release History: io.js, LTS Lines, Permissions, Security
How Node.js went from 0.x and the io.js fork to 30 month LTS lines, what the permission model really restricts, and how security releases ship.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.