Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A web page can forge messages to a content script. Send IDs not URLs, build requests inside the extension and filter what you inject. A short design guide.
Two ways to scan on every change: run the CLI in your pipeline, or connect the repository to the platform. A decision guide with the trade-offs for each.
The Safeguard runner executes scan jobs on your own machine and uploads SBOMs and findings, never source. What it does, and what the docs do not yet say.
Run the Scorecard CLI against a public repository or npm package, read the per-check reasons, and export JSON. Setup, flags and limits in one guide.
Generate embeddings on your own machine through Ollama's /api/embed endpoint, batch inputs, and keep private code off any third party service.
Paste a package.json, requirements.txt or SBOM into the free Gold scan and see known vulnerabilities with no login. What it accepts, its limits and a tip.
The three DDS-Security plugins ROS 2 uses, what each protects against, which files they need, and why two of the five plugin interfaces are skipped.
Seven questions to answer before any release so a bad change, including a security regression, can be reversed quickly, safely and with confidence.
When an assistant produces a thousand line diff, split it, review design first, run the code and demand tests that fail. A practical review routine.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
