Product
Safeguard articles tagged "Product" — guides, analysis, and best practices for software supply chain and application security.
100 articles
Can the JetBrains plugin check a package before you install it?
The Safeguard JetBrains plugin scans manifests after you add a dependency. The pre-install typosquat check is documented only for VS Code and Cursor.
Generating an SBOM in Safeguard and where the mobile apps fit
SBOM generation in Safeguard runs from the web platform, CLI or CI, and you can scan Android APKs too. Here is the flow and where the mobile apps fit in.
Fixing a vulnerable dependency with AI Remediate and what to review
AI Remediate opens a pull request with an upgrade and test results. Here is the documented flow, what to review before merging, and where mobile fits in.
How do you find leaked secrets with the Safeguard CLI?
Install the CLI, run safeguard detect for secrets on your tree, read table, JSON or SARIF output, then rotate real keys. Steps, allowlists and gaps.
How do you prepare audit evidence with the Safeguard desktop app?
Scan folders locally in the desktop app, create a framework report in the web view and a CLI report for your auditor. What it collects and cannot decide.
Why is this finding reachable? Asking Safeguard through ChatGPT
Connected to the Safeguard MCP server, ChatGPT can pull findings and CVE details. Where the reachability verdict lives and how to question it, with limits.
Can you schedule scans with the Safeguard VS Code extension?
The VS Code extension scans on open and on save, not on a timer. Tune those settings, then schedule real scans with the CLI in CI or desktop tasks.
Why is this finding reachable? Using VS Code and Safeguard together
Reachability says whether your code can call a vulnerable function. See how the VS Code extension and its chat panel help you ask why a finding matters.
Preparing audit evidence from the Safeguard VS Code extension
The VS Code extension can generate an SBOM, export reports and check compliance. See what each gives an auditor, and what you must add yourself.
How do you triage a vulnerable dependency in Cursor with Safeguard?
Install the Safeguard extension from Open VSX in Cursor, scan, ask the assistant about a finding, then check reachability in the web app before you fix.
How do you triage a critical vulnerability with Safeguard in Claude?
Connect the Safeguard MCP server to Claude, ask for critical findings, then decide using exploitation, reachability and fix data. Setup steps and routine.
Triage a critical vulnerability with the Safeguard desktop app
Triage a critical CVE with five questions: exposure, reachability, exploitation, fix and owner. Use it in the Safeguard desktop app.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.