sbom
Safeguard articles tagged "sbom" — guides, analysis, and best practices for software supply chain and application security.
1024 articles
Permissive License Explained: MIT, Apache 2.0, and BSD Risks
What a permissive license is, how MIT, BSD, and Apache 2.0 differ, and the compliance and security risks teams overlook when they assume permissive means risk-free.
10 serverless security best practices
10 concrete, numbers-backed serverless security practices covering IAM least privilege, dependency SBOMs, event injection, and secrets management.
Licence logicielle : le guide securite et conformite
Ce qu'est une licence logicielle, pourquoi elle constitue un risque de securite et de conformite dans vos dependances open source, et comment la gerer concretement.
Container image scanning: how it works and best tools
A practical guide to container image scanning: how layer-by-layer CVE detection works, how Trivy stacks up, and where Safeguard adds deeper coverage.
WebAssembly (WASM) security considerations
A 2018 WASM cryptominer hit 4,275+ websites in a day. Learn WebAssembly's real security risks, from memory bugs to supply chain blind spots.
Apache Licence Explained: What the Apache 2.0 Licence Means for Your Code
The Apache licence is permissive but not effortless. Here is what Apache 2.0 actually requires — the patent grant, the NOTICE file, and where it clashes with GPL.
The State of Open Source Security report (annual series)
Safeguard's annual State of Open Source Security Report finds transitive dependencies now drive most exposure, and reachability — not CVSS alone — separates mature security programs.
Software supply chain attacks: how they work and recent e...
Software supply chain attacks like SolarWinds, xz-utils, and polyfill.io bypass vulnerability scanners entirely. Here's how they work and where provenance verification fills the gap.
The State of Cloud Native Application Security survey
New 2026 survey data reveals a widening gap between vulnerability alert volume and remediation capacity — and what security teams say actually helps.
PulseMeter report: software supply chain risk perceptions
Safeguard's latest PulseMeter survey finds 71% of teams hit a supply chain incident this year, but only 34% feel confident they'd catch one in time.
What Is a Software Licence? A Plain-English Guide
A software licence is the legal agreement that defines how you may use, copy, modify, and distribute a piece of software. Here is how the main types differ and why it matters.
5 risks of open source software in 2026
Open source now makes up most enterprise code. Here are 5 risks defining open source software security in 2026 — and how to close the exploitability gap.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.