Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (223)Vulnerability Analysis (12004)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1716)Supply Chain (1423)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Supply Chain Security (281)Best Practices (264)Open Source (252)Product (223)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (148)Regulatory Compliance (144)Concepts (116)Ranking (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Product

Can the Safeguard JetBrains plugin review a vendor SBOM?

The JetBrains plugin scans your project manifests. SBOM export is not documented for it, so review vendor SBOMs with the CLI in the IDE terminal.

Oct 18, 20264 min read
Product

Generate and read an SBOM in the Safeguard web app chat

Connect a repository in the Safeguard web app to generate an SBOM, then ask the search chat about components, licenses and CVEs in plain words.

Oct 18, 20265 min read
Product

How to generate and read an SBOM with the Safeguard CLI

Install the Safeguard CLI, run a scan on a directory, then read the SBOM and result files it writes. Validate formats and count findings with jq.

Oct 18, 20264 min read
Product

How do you generate and read an SBOM with the Safeguard CLI?

Install the Safeguard CLI, run one scan to build an SBOM from your repo, then read the output files. Local runner mode keeps scanning on your machine.

Oct 18, 20264 min read
Product

How do you gate a pull request with the Safeguard CLI?

The Safeguard CLI reports findings but does not fail builds. Use it to produce SARIF or JSON in CI, and add your own severity check or a platform gate.

Oct 18, 20265 min read
Product

Can the Safeguard local runner gate a pull request?

The local runner scans on your machine and uploads results, not source. Gates are enforced by the platform. Here is how the two fit and where to look.

Oct 18, 20264 min read
Product

Can you gate a pull request from your phone?

A pull request gate runs in your pipeline, not on a phone. What a gate is, what you can review and approve on mobile, and where the mobile app beta fits.

Oct 18, 20264 min read
Product

Can Claude gate a pull request through the Safeguard MCP server?

Claude can query Safeguard findings over MCP before you approve a pull request, but the block comes from platform policy gates. Setup steps and limits.

Oct 18, 20264 min read
Product

How do you review and gate a pull request with Safeguard PR Guard?

In the Safeguard web app, open a project's PR Guard tab, run a review on a GitHub pull request and read scored findings. Plus how to enforce a real gate.

Oct 18, 20265 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.