Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Three 2026 advisories: NocoDB shipped a cookie without Secure or SameSite, Cacti and Ghost never rotated the session ID at login. A short audit you can run on your own app.
A cooldown slows routine updates but must never slow a security fix. A working Dependabot policy, using the PyJWT 2.14.0 release as the test case.
Gitea CVE-2026-73800 let a fork run code with repository secrets. A gate design for your own pull requests: which findings block, how to triage SAST, and why the CI itself needs a gate.
Open WebUI CVE-2026-54016 came from a helper tool that took a knowledge base ID and skipped the access check. A 20 minute threat model that would have asked the right question.
A plain map of where you can use Safeguard today: web app, CLI, desktop and mobile betas, Chrome extensions, IDE plugins and the MCP server.
Install the Safeguard CLI, sign in, scan a project, read the output files, and wire SARIF into CI. Real commands from the docs, with the caveats stated.
How the local runner works, when to use it, and the exact commands to run it interactively or headless. Source stays on your machine, only encrypted results are pushed.
What the Safeguard IDE extensions do, how to install them in VS Code, Cursor and JetBrains IDEs, and which features differ between the two.
Two Chrome extensions: one opens Safeguard search in a side panel, the other looks up packages in Gold. What each does and how to install them.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
