Product
Safe, Balanced or Aggressive: which fix strategy in JetBrains?
The Safeguard JetBrains plugin offers Safe, Balanced and Aggressive dependency fixes. Use Balanced by default, Safe near a release, Aggressive on a branch.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Can the JetBrains plugin check a package before you install it?
The Safeguard JetBrains plugin scans manifests after you add a dependency. The pre-install typosquat check is documented only for VS Code and Cursor.
Oct 18, 20264 min read
Product
Generating an SBOM in Safeguard and where the mobile apps fit
SBOM generation in Safeguard runs from the web platform, CLI or CI, and you can scan Android APKs too. Here is the flow and where the mobile apps fit in.
Oct 18, 20264 min read
Product
Fixing a vulnerable dependency with AI Remediate and what to review
AI Remediate opens a pull request with an upgrade and test results. Here is the documented flow, what to review before merging, and where mobile fits in.
Oct 18, 20264 min read
Product
How do you find leaked secrets with the Safeguard CLI?
Install the CLI, run safeguard detect for secrets on your tree, read table, JSON or SARIF output, then rotate real keys. Steps, allowlists and gaps.
Oct 18, 20265 min read
Product
How do you prepare audit evidence with the Safeguard desktop app?
Scan folders locally in the desktop app, create a framework report in the web view and a CLI report for your auditor. What it collects and cannot decide.
Oct 18, 20264 min read
Product
Why is this finding reachable? Asking Safeguard through ChatGPT
Connected to the Safeguard MCP server, ChatGPT can pull findings and CVE details. Where the reachability verdict lives and how to question it, with limits.
Oct 18, 20265 min read
Product
Can you schedule scans with the Safeguard VS Code extension?
The VS Code extension scans on open and on save, not on a timer. Tune those settings, then schedule real scans with the CLI in CI or desktop tasks.
Oct 18, 20265 min read
Product
Why is this finding reachable? Using VS Code and Safeguard together
Reachability says whether your code can call a vulnerable function. See how the VS Code extension and its chat panel help you ask why a finding matters.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.