AI Security
RAG Pipeline Supply Chain Attacks: Vector DBs and More
RAG pipelines have six or seven supply chain surfaces, and most teams are only watching one. Here is how the attacks actually look in production.
Feb 3, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
SEvenLLM Design And Coverage
SEvenLLM set out to measure how well LLMs handle Security Event analysis, the unglamorous day-to-day work of SOCs and IR teams. A design review of what the benchmark covers, how it was built, and where the coverage maps or does not map to real operations.
Feb 2, 20266 min read
AI Security
Griffin AI vs Claude Haiku for Bulk Scanning
Claude Haiku is the cost-efficient model Griffin uses for high-volume scan interpretation. Here's how raw Haiku compares to Haiku inside Griffin's bulk pipeline.
Feb 2, 20266 min read
AI Security
LLM Prompt Injection: The New Supply Chain Attack Vector
Prompt injection attacks against large language models represent a dangerous new frontier in software supply chain security. Here's what defenders need to know.
Feb 1, 20266 min read
AI Security
Audit Log Completeness: Griffin AI vs Mythos
Audit logs are where enterprise AI either proves its seriousness or exposes its improvisation. The gap between Griffin AI and Mythos-class products is visible in the first day of a real audit.
Feb 1, 20267 min read
AI Security
Griffin AI vs OpenAI o1 for Security Reasoning
Deep reasoning models are transformative for hard logical problems. Security reasoning is only partially a logic problem—the rest is grounding, policy, and workflow.
Feb 1, 20267 min read
AI Security
Small-Model Distillation For Security Workflows
Distillation compresses the capability of a large model into a small one for a narrow task. For high-volume security workflows, it is often the difference between a working pipeline and an unaffordable one.
Feb 1, 20266 min read
AI Security
Training Data Opacity As A Trust Limit
You cannot audit what you cannot see. Frontier model training corpora are effectively opaque to their users, and that opacity is not incidental. It shapes what kinds of trust you can extend to the outputs.
Jan 31, 20267 min read
AI Security
Griffin AI vs Gemini Long Context for Codebases
Gemini's million-token context window is a genuinely new capability. For security analysis of large codebases, is it enough on its own?
Jan 31, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.