AI Security
Tool gating or Guard: which MCP control do you need?
Tool gating limits which Safeguard tools an assistant sees. Guard enforces live policy on MCP traffic in general. They are independent. How to choose.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Token exchange for AI agents: delegation vs impersonation
OAuth token exchange (RFC 8693) lets an agent act for a user without becoming them. Learn the act claim, may_act, and why delegation beats impersonation.
Oct 18, 20263 min read
AI Security
Testing AI systems under the NIST MEASURE function
What the NIST MEASURE function expects: documented test sets, production monitoring, safety, security, privacy and bias checks, and independent review.
Oct 18, 20263 min read
AI Security
Stop sign stickers and physical adversarial examples explained
Researchers fooled a road sign classifier with stickers on a real stop sign. What the study showed, what it did not, and how builders test for it.
Oct 18, 20264 min read
AI Security
Stop AI agents leaking sensitive data through their context
OWASP's sensitive information disclosure guidance applied to agents: sanitize, limit data access, redact, and never trust a prompt to hold secrets.
Oct 18, 20263 min read
AI Security
Slack AI prompt injection: why search scope decides what can leak
PromptArmor showed in 2024 that Slack AI could be steered by a public channel message to leak a private key. How it worked and how scope limits help.
Oct 18, 20263 min read
AI Security
Should AI coding agents be allowed to run install commands?
A decision guide for letting a coding agent run npm or pip installs on its own: when approval is wise, what to restrict, and why install scripts matter.
Oct 18, 20263 min read
AI Security
Separating planning from parsing: a design pattern for LLM agents
One design idea for injection resistant agents: keep untrusted text away from the model that plans actions. What the pattern is and what is still research.
Oct 18, 20263 min read
AI Security
What to put in a security rules file for your AI coding assistant
A rules file steers an assistant toward safer defaults. What to include, what it cannot guarantee, and why the file needs the same review as code.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.