ai-security
Safeguard articles tagged "ai-security" — guides, analysis, and best practices for software supply chain and application security.
593 articles
Auth Bypass Discovery: Griffin AI vs Mythos
Auth bypasses are rarely a single bug. They live in the interaction between layers — middleware, route handlers, framework annotations. Finding them requires path analysis across abstraction layers.
Coordinated Disclosure With Upstream Maintainers
Coordinated disclosure with open-source maintainers is a relationship business. Here is what makes it work in 2026, with the artefacts a modern pipeline gives you.
AI Supply Chain Attacks: Emerging Threats in Model and Data Pipelines
As organizations adopt AI at scale, the AI/ML supply chain is becoming a new attack surface. From poisoned models to compromised training data, the threats are real and growing.
Chain-Of-Thought For Vulnerability Reasoning
Chain-of-thought helps LLMs with multi-step problems. For vulnerability reasoning, it helps — but only when the chain is grounded in structured evidence.
Eval Harness As Release Gate For AI Features
Shipping AI features without an eval harness is shipping without tests. Here is how to build one that actually gates releases without becoming a bottleneck.
Frontier Model Pricing Pressure: Architectural Response
Frontier model pricing is rising even as cheaper alternatives proliferate. The 2026 architectural response is multi-tier model routing — and the security implications are non-trivial.
Context Window Limits: Griffin AI vs Mythos
Context-window size matters less than context quality. A look at how Griffin AI's engine-grounded context beats pure-LLM retrieval at monorepo scale.
What is AI Security
AI security protects models, training data, and agentic systems from prompt injection, poisoning, and unsafe autonomy — here's what it covers and how to build a program.
What is LLM Security
LLM security protects model weights, prompts, outputs, and the AI supply chain from injection, leakage, and compromise—here's what it covers and how to defend it.
Model Substitution Risk In Enterprise Deployments
The model you think you're calling might not be the model that returns. Model substitution is a quiet supply chain risk that deserves explicit controls.
NIST AI RMF Cybersecurity Profile (NIST IR 8596 Draft)
NIST released the preliminary draft Cybersecurity Framework Profile for AI (NIST IR 8596) in December 2025, addressing the intersection of AI and cybersecurity from three angles.
Remediation SLA Tracking Without Spreadsheets
Tracking remediation SLAs in spreadsheets is how programmes drift. Here is how to track SLAs in the same system that finds, fixes, and merges vulnerabilities.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.