AI Security
RAG Pipeline Supply Chain Attacks: Vector DBs and More
RAG pipelines have six or seven supply chain surfaces, and most teams are only watching one. Here is how the attacks actually look in production.
Feb 3, 20267 min read
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
RAG pipelines have six or seven supply chain surfaces, and most teams are only watching one. Here is how the attacks actually look in production.
SEvenLLM set out to measure how well LLMs handle Security Event analysis, the unglamorous day-to-day work of SOCs and IR teams. A design review of what the benchmark covers, how it was built, and where the coverage maps or does not map to real operations.
Claude Haiku is the cost-efficient model Griffin uses for high-volume scan interpretation. Here's how raw Haiku compares to Haiku inside Griffin's bulk pipeline.
Audit logs are where enterprise AI either proves its seriousness or exposes its improvisation. The gap between Griffin AI and Mythos-class products is visible in the first day of a real audit.
Deep reasoning models are transformative for hard logical problems. Security reasoning is only partially a logic problem—the rest is grounding, policy, and workflow.
Distillation compresses the capability of a large model into a small one for a narrow task. For high-volume security workflows, it is often the difference between a working pipeline and an unaffordable one.
You cannot audit what you cannot see. Frontier model training corpora are effectively opaque to their users, and that opacity is not incidental. It shapes what kinds of trust you can extend to the outputs.
Gemini's million-token context window is a genuinely new capability. For security analysis of large codebases, is it enough on its own?
Auto-remediation only scales if human review stays cheap. Griffin AI's grounded PRs keep reviewer time low; Mythos-class PRs push the cost back to humans.
Weekly insights on software supply chain security, delivered to your inbox.