software-supply-chain
Safeguard articles tagged "software-supply-chain" — guides, analysis, and best practices for software supply chain and application security.
527 articles
ASPM best practices for enhancing security posture
ASPM best practices for correlating findings, prioritizing by reachability, and automating remediation — with a concrete look at how Prisma Cloud's approach compares.
Mobile Application Security: Risks & Tools
BLASTPASS, XcodeGhost, and a 2024 OWASP supply-chain category show mobile app security is its own attack surface — here's what to fix first, and with what tools.
ASPM in action: real-world use cases
ASPM use cases from alert fatigue to the XZ Utils backdoor and PCI DSS 4.0 deadlines — what Prisma Cloud's cloud-native approach misses and how code-first ASPM closes the gap.
Developer infrastructure posture: integrating ASPM early
Prisma Cloud built ASPM outward from the cloud. Real breaches like tj-actions and SolarWinds start earlier, in developer infrastructure that needs its own continuous posture model.
What Is the CI/CD Pipeline (and CI/CD security)?
CI/CD pipelines now hold more privileged access than any other system — yet they're the least monitored. Here's what CI/CD pipeline security really requires.
LLM Traces and Evals: The Missing Layer in AI Supply Chain Security
Prompt traces and offline evals are standard hygiene for ML teams, but almost nobody treats them as supply chain telemetry. They should be. Here's how traces and evals plug into SBOM and reachability as a fourth security signal.
Application Security: a practitioner's guide
A practitioner's guide to application security: SAST, SCA, secrets, and supply chain integrity—plus how Safeguard compares to Prisma Cloud's CNAPP.
Top cloud data security solutions
Prisma Cloud's DSPM bolts data classification onto a 30-module CNAPP after resources already exist in the cloud. Here's why that misses the supply chain risks that matter most.
Forecasting the cloud security landscape (annual predicti...
Where does cloud security head into 2027? We break down six concrete predictions on CNAPP consolidation, supply chain risk, and Prisma Cloud gaps.
What Is CNAPP? (Cloud-Native Application Protection Platf...
CNAPP unifies CSPM, CWPP, CIEM, and app security into one platform. Here's the Gartner-defined pillars, how Prisma Cloud stacks up, and the supply-chain gap it leaves.
Attack Surface Management (ASM): best practices guide
A practical attack surface management best practices guide for software supply chains, covering SBOMs, base image hardening, CI/CD exposure, and a 90-day rollout plan.
What Are Transitive Dependencies
Transitive dependencies are the packages your code never directly imports but inherits anyway — and where 84% of open source CVEs actually live.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.