Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (223)Vulnerability Analysis (12004)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1716)Supply Chain (1423)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Supply Chain Security (252)Open Source (252)Product (223)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (148)Regulatory Compliance (144)Concepts (116)Ranking (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Product

How do you check a package before install in the Safeguard desktop app?

In the Safeguard desktop app (beta), look up the package, add it to the lockfile only on a throwaway branch, scan the folder, then decide. Steps, limits.

Oct 18, 20264 min read
Product

How do you check a package before installing it in Cursor?

Install the Safeguard extension via Open VSX, add the dependency to your manifest, and read the flags before you run install. Steps and limits below.

Oct 18, 20264 min read
Product

Check your code in the Safeguard desktop app before a pull request

The Safeguard desktop app (beta) can scan a project folder locally before you open a pull request. See what it does, what it does not, and where review is.

Oct 18, 20265 min read
Product

How do you check a package before you install it in VS Code?

The Safeguard VS Code extension flags typosquats, namespace confusion and known malware as you type a dependency into a manifest. Set it up in five steps.

Oct 18, 20265 min read
Product

How do you vet a new dependency during pull request review?

Look up each new package in the Gold Open Source extension beside the diff, then use the Safeguard side panel for questions. What these extensions do.

Oct 18, 20264 min read
Product

Can the Safeguard Chrome extension run scheduled scans?

The Chrome extension opens Safeguard search in a side panel and does not schedule scans itself. Here is where recurring scans live and how to set them up.

Oct 18, 20264 min read
Product

Can you prepare audit evidence with the Safeguard MCP server in ChatGPT?

Connect the Safeguard MCP server to ChatGPT with OAuth, pull findings as audit inputs, and build framework reports in the web app. Know what each does.

Oct 18, 20264 min read
Product

Can you gather audit evidence by chatting with Safeguard?

The Safeguard web app is chat first, so you can ask for control status and evidence in plain words. Learn how to ask well and what to verify before filing.

Oct 18, 20264 min read
Product

Audit prep with the Safeguard Chrome extension: what it can and cannot do

The Safeguard Chrome extension is a search side panel, not an evidence exporter. How it helps during audit prep and where evidence really comes from.

Oct 18, 20264 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.