software security
Safeguard articles tagged "software security" — guides, analysis, and best practices for software supply chain and application security.
9 articles
FTC Section 5 and software security: how 'unfair practices' became a supply chain doctrine
The Federal Trade Commission has spent the last several years building a software-security enforcement theory under Section 5. Drizly, SolarWinds, and Henry Schein each contributed pieces of the framework.
CISA's Secure by Design Pledge: Voluntary Commitments with Real Teeth
CISA launched a voluntary pledge asking software manufacturers to commit to specific security improvements. Over 100 companies signed. Here is what the pledge actually requires and whether it matters.
PCI DSS 4.0 Software Security Requirements
PCI DSS 4.0 became mandatory on March 31, 2024, overhauling software security, SBOM visibility, and supply chain controls for every entity that touches cardholder data.
SWIFT CSCF: Software Security Requirements for Financial Messaging
SWIFT's Customer Security Controls Framework sets mandatory security baselines for financial institutions. Here's the software supply chain angle.
HIPAA and Software Supply Chain Compliance for Health Tech
HIPAA's Security Rule requires safeguards that extend to software dependencies. Here's what health tech developers and vendors need to address.
CCPA/CPRA and Software Security: What Developers Must Know
California's privacy laws impose security obligations on software that handles consumer data. Here's how CCPA and CPRA intersect with supply chain risk.
GLBA and Financial Software Security: Safeguards Rule Deep Dive
The GLBA Safeguards Rule now requires specific cybersecurity controls for financial institutions. Here's how it affects software supply chains.
GDPR and Software Supply Chain Obligations You Can't Ignore
GDPR's security requirements extend deep into software supply chains. Here's where data protection law meets dependency management.
Brazil's LGPD and Its Implications for Software Security
Brazil's data protection law creates obligations for software security and supply chain transparency. Here's what developers and vendors should know.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.