AI Security
Are embeddings sensitive data? Embedding inversion explained
Treat embeddings like the data they came from. OWASP warns that attackers can reverse embeddings to recover source information. What that means for you.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
RFP questions to ask when a security tool advertises AI features
Twelve RFP questions that separate real AI capability from marketing: models used, data sent, accuracy evidence, human review, and cost behavior at scale.
Oct 18, 20263 min read
AI Security
Approving AI agent actions from your phone: what to check first
Remote approval prompts for AI agents are only a control if you can read them. What the MCP spec and OWASP say and a checklist for small screens.
Oct 18, 20264 min read
AI Security
What to teach employees about using AI tools safely
A short training outline for staff using AI assistants: approved tools, what data stays out, how to check output, and reporting mistakes without blame.
Oct 18, 20263 min read
AI Security
AI risk assessment for one system: a step-by-step method
How to run an AI risk assessment on a single system using the NIST AI RMF: context, categories, impacts, tests, treatment and residual risk.
Oct 18, 20263 min read
AI Security
AI phishing triage workflow for small security teams
A step by step workflow for using an LLM on employee-reported phishing: what code does, what the model drafts and what a person must decide.
Oct 18, 20263 min read
AI Security
AI incident summaries: verify before you send them
LLMs write smooth incident summaries that can include wrong times, invented causes and missing steps. Use this checklist to verify one before it goes out.
Oct 18, 20263 min read
AI Security
AI incident response: what to add to your existing plan
Your incident plan probably misses AI failures. What to add: definitions, intake fields, a kill switch, communication, third-party cases and review.
Oct 18, 20263 min read
AI Security
AI governance roles and responsibilities: a simple RACI
Who owns what in AI governance? A simple RACI for executive, system owner, security, legal, engineering and reviewers, based on NIST AI RMF accountability.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.