Industry Analysis
How leaders reinforce a blameless postmortem culture
How security leaders keep blameless reviews alive: take part, reward good write-ups, avoid stigma and share lessons widely, from Google's SRE guidance.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
After a bad security quarter, will things improve on their own?
Extreme quarters tend to be followed by more ordinary ones. How regression to the mean can fake the success of a new security program, and how to guard against it.
Oct 18, 20263 min read
Industry Analysis
Qualitative vs quantitative cyber risk: which to use
Qualitative scoring is fast and rough; quantitative analysis gives money estimates but needs data. Here is how to choose for your team and when to mix.
Oct 18, 20263 min read
Industry Analysis
PSD3 and PSR: what the provisional deal means for engineering teams
A plain summary of the November 2025 provisional EU deal on PSD3 and the Payment Services Regulation, and the engineering work it points to.
Oct 18, 20263 min read
Industry Analysis
Post-quantum standards timeline: the dated milestones so far
A dated list of verified post-quantum milestones from 2020 to 2026, from SP 800-208 and FIPS 203 to HQC and the additional signature round 3.
Oct 18, 20263 min read
Industry Analysis
Why post-quantum key exchange is moving faster than signatures
Post-quantum key agreement is already common on the web, but post-quantum certificates lag far behind. Why the two halves of TLS move at different speeds.
Oct 18, 20263 min read
Industry Analysis
Poland's December 2025 energy attacks: what CERT Polska reported
CERT Polska reported coordinated wiper attacks on 29 December 2025 against wind, solar and heat sites. What happened and what blocked one attack.
Oct 18, 20264 min read
Industry Analysis
Physical AI security timeline: seven sourced cases from 1986 to 2026
A dated timeline of sourced milestones in vehicle, robot and drone security, from CAN in 1986 to the Cyber Resilience Act dates in 2026 and 2027.
Oct 18, 20264 min read
Industry Analysis
Percent or count: the denominator problem in security metrics
95 percent of assets scanned can mean 38 percent of what you own. Learn how denominators mislead security metrics and how to state them.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.