asset-discovery
Safeguard articles tagged "asset-discovery" — guides, analysis, and best practices for software supply chain and application security.
15 articles
Your API Inventory Is Smaller Than Your API
The spec says one number, the gateway serves a larger one, and the difference is your unprotected surface: undecommissioned v1 routes, framework-generated handlers, and the debug endpoint added during an incident.
The Subdomain You Forgot Is Someone Else's Now
A CNAME outlives the vendor account it pointed at, the platform frees the hostname, and anyone can claim it. The damage is rarely the defaced page: it is parent-domain cookies, OAuth redirects and a CSP that trusts subdomains.
Best attack surface management (ASM) tools
A practical buyer's guide comparing top attack surface management tools and ASM platforms, with honest strengths, limitations, and evaluation criteria.
How to Discover Shadow and Undocumented APIs Before Attackers Do
A single undocumented API endpoint exposed 10 million Optus records in 2022. Here's how to find shadow APIs in production and assess their real exposure.
A Step-by-Step Methodology for Mapping and Prioritizing Attack Surface
CVE-2023-34362 sat in one internet-facing file-transfer server and still produced thousands of downstream breaches — attack surface mapping is what catches that server before Cl0p does.
You Cannot Secure What You Cannot See: Asset Discovery
Most breaches start with an asset nobody remembered owning. Continuous asset discovery is the foundation that every other control depends on.
Discovering Shadow AI Models In Production
Engineers ship models faster than security can track them. Here is how to find shadow AI in production without slowing the teams that build it.
Inventory Of MCP Servers: Enterprise Program
MCP servers proliferate faster than governance can track them. Build an inventory program that captures every server, tool, and consumer agent.
Finding Forgotten Public npm Packages In Your Org
Public npm packages your org published years ago are now an attacker's best targets. Find them before someone else does.
Unifying Software And AI Assets In One Graph
Two parallel inventories for software and AI assets do not survive contact with reality. A unified graph is what makes governance feasible.
Asset Discovery For M&A Due Diligence
M&A due diligence runs on questionnaires that nobody can verify. Continuous asset discovery turns the diligence period into a data exercise.
Runtime Asset Attribution: Pods To Services
Mapping a running pod back to a service, repo, owner, and SBOM is the boring infrastructure that makes every other security control useful.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.