Tools
In-depth guides and analysis on tools from the Safeguard engineering team.
50 articles
Grype v0.108 Release Notes Walkthrough
Anchore's Grype shipped v0.108.0 in late 2025 with the new vulnerability database v6 schema, distroless support fixes, and a tightened CPE matcher.
How deepfake fraud detection tools identify synthetic med...
A buyer's guide to real-time deepfake fraud detection tools: evaluation criteria, an honest comparison of six named vendors, and where Safeguard fits in.
Trivy v0.69 Release Deep Dive
Aqua's Trivy hit v0.69 in late 2025 with VEX-by-default scanning, ArtifactID/ReportID provenance fields, and faster misconfig scanning. We test the upgrade on a 1.2GB image.
Semgrep Community Fall 2025: Native Windows and 3x Multicore
Semgrep's Fall 2025 Community Edition ships native Windows binaries, a memory-efficient multicore engine, and up to 3x scan speedups. We benchmarked it.
Cosign v2.6: New Bundle Format and Trusted Root
Sigstore's Cosign v2.6 unlocks offline verification, in-toto statement signing, and trusted-root portability. We walk through the new --new-bundle-format flag end-to-end.
Syft v1.20 Release: Faster Scans, Smarter License Detection
Anchore's Syft v1.20 ships a refactored license cataloger, Bitnami SBOM passthrough, and a 2x speedup on filesystem scans. We tested the upgrade on five real codebases.
CodeQL 2.22 Security Query Pack Review
GitHub's CodeQL 2.22.4 runs 478 security queries by default across 169 CWEs. We map the new queries added in 2025 and benchmark scan times on real repos.
Best Container Base Images for Security in 2026
Chainguard, distroless, Alpine, UBI micro, Ubuntu chiseled, and scratch, compared on CVE counts, size, libc, and the operational costs nobody puts in the marketing.
Anthropic Claude vs OpenAI GPT: Enterprise Security in 2026
A pragmatic comparison of Claude and GPT for enterprise deployments in 2026, focused on the security and governance controls that matter to a buyer.
Trivy Operator v0.30: Kubernetes Field Review
Trivy Operator hit v0.30 in early 2026 and the underlying Trivy v0.70 engine landed in April. We benchmarked the combo on a 60-node multi-tenant cluster.
Checkov 3.2.x Field Review: IaC Scanning in 2026
Bridgecrew's Checkov is still shipping weekly patches in 2026. We ran 3.2.527 against a 38,000-line Terraform monorepo and graded coverage, noise, and CI cost.
Checkmarx vs WhiteSource (Mend) Buyer Comparison 2026
A 2026 head-to-head buyer comparison of Checkmarx and Mend (formerly WhiteSource): SCA depth, SAST, reachability, AI features, pricing, and decision framework.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.