Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (1022)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1022)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Supply Chain Security

Rayleigh Scattering With Worked Examples: Blue Skies and Red Sunsets

Air molecules scatter blue light about 5.9 times more than red, which colours the sky. Worked examples for blue skies, red sunsets, violet and fibre loss.

Oct 25, 202643 min read
Supply Chain Security

Microsoft Pluton Explained: Security Processor, TPM 2.0 and Updates

Pluton is a Microsoft designed security processor inside AMD, Intel and Qualcomm chips. How it works, how it acts as a TPM and how it is updated.

Oct 25, 202639 min read
Supply Chain Security

DRTM Explained: Intel TXT, AMD SKINIT and Secure Launch

DRTM restarts the chain of trust after firmware has run. How Intel TXT, AMD SKINIT and Secure Launch measure a late launch, and how to check yours.

Oct 25, 202639 min read
Supply Chain Security

Mac OS X Release History: 10.0 Cheetah to 10.15 Catalina Security

Every Mac OS X release from 10.0 Cheetah (2001) to 10.15 Catalina (2019), its last security update and the protections it added, from FileVault to SIP.

Oct 25, 202640 min read
Supply Chain Security

How Quartz Crystal Oscillators Are Made: Cultured Quartz to TCXO and OCXO

Quartz oscillators start as cultured quartz grown in autoclaves, then are cut, lapped, plated, trimmed and sealed. Here is each step, plus TCXO and OCXO.

Oct 25, 202636 min read
Supply Chain Security

How a Hardware Security Key Is Made: Secure Elements, FIDO, Firmware

A security key is a certified secure chip, NFC antenna and touch pad sealed in plastic, with an attestation key added at the factory. How it is built.

Oct 25, 202640 min read
Supply Chain Security

NFC Explained: ISO/IEC 14443, NDEF, Card Emulation and Relay Attacks

NFC is 13.56 MHz radio for a few centimetres, built on ISO/IEC 14443 and 18092. How NDEF, card emulation and relay attacks work, and what limits relays.

Oct 25, 202641 min read
Supply Chain Security

EtherNet/IP and CIP Explained: Messaging, Objects and CIP Security

EtherNet/IP carries ODVA's CIP over TCP 44818 and UDP 2222. How objects, explicit and implicit messaging, Forward Open and CIP Security profiles work.

Oct 25, 202641 min read
Supply Chain Security

Facial Recognition Explained: How Face Matching Works and the Law

How face matching turns a face into a vector and a score, why thresholds and bias tests matter, and what BIPA, GDPR and the EU AI Act require.

Oct 25, 202639 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.