Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (2961)Vulnerability Analysis (12004)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1716)Supply Chain (1423)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)Supply Chain Security (319)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Product (223)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (148)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Developer Tools

Adding the Safeguard connector to Claude on a Team or Enterprise plan

On a Claude Team or Enterprise plan, an Owner adds the Safeguard connector once and members connect it themselves. Here is the order of steps and why.

Oct 18, 20263 min read
Developer Tools

Adding an MCP server in VS Code: UI, mcp.json and trust

Several ways to add an MCP server in VS Code, which config file each uses, how workspace trust works, and how to sandbox and debug a server safely.

Oct 18, 20263 min read
Developer Tools

How to add an MCP server to Claude Code, step by step

The exact claude mcp add commands for remote HTTP, local stdio and JSON config, plus how to check a new server is connected and how to remove it.

Oct 18, 20263 min read
Developer Tools

Configuring MCP in Cursor: mcp.json, OAuth and approvals

Where Cursor keeps MCP config, how stdio and remote servers differ, how OAuth redirects work, and what the tool approval prompt shows you before it runs.

Oct 18, 20263 min read
Developer Tools

Adding a custom MCP connector in Claude: plans, steps, limits

How to add a remote MCP server as a custom connector in Claude, who can do it on each plan, why it must be public, and which cautions to follow.

Oct 18, 20263 min read
Developer Tools

Which Safeguard CLI scan target: directory, image, repo or SBOM?

The scan command takes one target: a directory, a container image, a Git repository or an SBOM. Here is when each one fits and what each one misses.

Oct 18, 20263 min read
Developer Tools

Which Safeguard IDE extension do you need: VS Code, JetBrains or Open VSX?

Match your editor to the right Safeguard extension: VS Code, JetBrains IDEs, or Open VSX for Cursor, Windsurf and Codium. Versions as of 19 Oct 2026.

Oct 18, 20263 min read
Developer Tools

Why a 'for 1h' alert clause misses real incidents

A duration clause on an alert delays all incidents equally and resets on brief recovery. See why it fails and what to use instead.

Oct 18, 20263 min read
Developer Tools

Why your Safeguard MCP connection shows only six tools

A new Safeguard workspace exposes six read-only MCP tools by default. Every other tool stays off until an administrator enables it. Here is what to do.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.