AI Security
How should a disclosure policy handle AI-written bug reports?
Ask for reproduction, plain words and proof, not a ban on tools. What one major open source project asks of reporters and what your policy can borrow.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
What do AI security vendors mean? A glossary of twelve buying terms
Twelve AI security terms in plain words, from agent and MCP to guardrail, gate, excessive agency and tool poisoning, so you can read a vendor page.
Oct 18, 20264 min read
AI Security
Which metrics show an AI agent governance rollout is working at 90 days?
At 90 days, track coverage, owner assignment, scope reduction, approval quality, exceptions and time to stop. Six measures that show governance is real.
Oct 18, 20263 min read
AI Security
How do you answer 'Do you use AI to write code?' in a questionnaire
Buyers ask whether AI writes your code. Cover usage scope, review rules, dependency checks, data handling and logging without overclaiming control.
Oct 18, 20263 min read
AI Security
What should the contract say about AI features in an AppSec tool?
AI triage and fix suggestions change your data flow. Contract and review questions on model providers, retention, training, opt out and human approval.
Oct 18, 20263 min read
AI Security
AI coding assistant security evaluation: questions for the vendor
What to ask an AI coding assistant vendor before rollout: data handling, retention, training use, admin controls, agent mode and incident response.
Oct 18, 20263 min read
AI Security
AI chat privacy myths vs facts for families
Seven common beliefs about AI chat privacy, checked against Anthropic and Google documentation: delete, incognito, links, voice, location and human review.
Oct 18, 20263 min read
AI Security
AI agent security tool categories: which one do you actually need?
AI agent security tools fall into a few categories: discovery, identity, guardrails, testing and observability. How to tell which problem you have first.
Oct 18, 20263 min read
AI Security
What should an AI agent kill switch cover? A buyer's checklist
An AI agent kill switch should stop actions, revoke credentials, halt queued work and keep a record. Use this checklist to test whether yours really works.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.