AI Security
Claude Code Coding Agent: Security Posture Review
A working review of Claude Code's security posture, sandboxing model, and the practical controls enterprises need to deploy it safely at scale.
Jan 30, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Cross-Package Analysis: Griffin AI vs Mythos
Real exploits cross package boundaries. Griffin AI's graph follows them; Mythos-class tools often stop at the file they are reading.
Jan 30, 20266 min read
AI Security
AI-BOM Awareness: Griffin AI vs Mythos
AI-BOM is how you describe an AI system's supply chain — models, datasets, prompts, inference environments. Griffin AI ingests it as structured inventory. Mythos-class tools try to talk about AI while remaining blind to the AI systems they describe.
Jan 29, 20267 min read
AI Security
SOC 2 Type II Evidence: Griffin AI vs Mythos
A SOC 2 Type II auditor samples a control population across a reporting period. Griffin AI creates that population as a natural output. Mythos-class pure-LLM tools leave you reconstructing it.
Jan 29, 20267 min read
AI Security
AI Model Weight Tampering Detection Techniques
Weight-level tampering leaves cryptographic and statistical fingerprints. Here is what current research says about detecting a modified checkpoint before it reaches inference.
Jan 29, 20268 min read
AI Security
Sandboxing LLM Agent Code Execution: Patterns
If your agent can execute code, something it reads from the internet can execute code. Pick your sandbox before the agent picks one for you.
Jan 29, 20267 min read
AI Security
Citation Accuracy: Griffin AI vs Mythos
An AI security tool that cites the wrong advisory is worse than one that says nothing. Griffin AI benchmarks citation accuracy at 0.89 similarity; Mythos does not.
Jan 28, 20267 min read
AI Security
SSRF Detection: Griffin AI vs Mythos
Server-side request forgery is a test of how well your scanner understands the boundary between trusted and untrusted URLs. Griffin's engine resolves URL construction through string builders, template engines, and HTTP client configuration; Mythos reads the code and guesses. On modern applications that is the difference between a finding you can ship and a finding you cannot defend.
Jan 28, 20267 min read
AI Security
MCP Server Capability Declaration Audit
An MCP server tells the world what it can do through its capability declaration. Auditing those declarations catches drift, tool poisoning, and misconfiguration before an agent gets talked into using the wrong one.
Jan 28, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.