Security Guides
What is HQC and why did NIST pick a backup to ML-KEM?
NIST selected HQC in March 2025 as a backup to ML-KEM, built on error-correcting codes instead of lattices. What it means for your migration plans.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What is functional safety? A plain explanation for software teams
Functional safety means automatic protection works correctly or fails predictably. Learn the idea, the main standards and how it differs from security.
Oct 18, 20263 min read
Security Guides
What is EPSS? The Exploit Prediction Scoring System explained
EPSS estimates the probability that a published CVE will be exploited in the next 30 days. Here is how to read the score and how it differs from CVSS.
Oct 18, 20263 min read
Security Guides
What is CWE? Common Weakness Enumeration vs CVE
CWE is a community catalog of common software and hardware weakness types. Learn what it classifies, who maintains it and how it relates to CVEs.
Oct 18, 20263 min read
Security Guides
What is CVSS? How the vulnerability severity score works
CVSS turns a vulnerability's characteristics into a severity score. See what it measures, what it ignores, and why it is not a priority list on its own.
Oct 18, 20263 min read
Security Guides
What business email compromise means for engineering teams
Business email compromise is fraud run through a real or spoofed mailbox. How it works, and why engineers, not just finance staff, are exposed to it.
Oct 18, 20263 min read
Security Guides
What is an advanced persistent threat? What NIST actually says
NIST defines an advanced persistent threat by skill, resources and persistence, not by country. See what the definitions say and how to use them.
Oct 18, 20264 min read
Security Guides
What is a zero-day? Vulnerability, exploit and attack defined
A zero-day attack exploits a previously unknown flaw. Learn how a zero-day differs from an n-day, why patches lag, and what defenders can do meanwhile.
Oct 18, 20263 min read
Security Guides
What is a cyber risk register and what goes in it
A cyber risk register is a living list of risk scenarios with an owner, a score and a chosen response. Here is what to record and what to leave out.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.