Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (1022)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1022)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (504)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Supply Chain Security

Segment Routing Explained: SR-MPLS, SRv6 and Securing Source Routing

Segment routing puts the path inside the packet as a list of SIDs. How SR-MPLS and SRv6 work, and why the SR domain edge must filter SIDs and SRH.

Oct 24, 202652 min read
Supply Chain Security

How a Game Console Is Made: Custom SoC, Security Chip and Signed Updates

A console is a custom SoC, GDDR6 and an SSD locked by a security processor. How it is built, how signed updates and anti-rollback work, and repair law.

Oct 24, 202644 min read
Supply Chain Security

How a Smart Speaker Is Made: Mic Arrays, Wake Word Chips and Firmware

A smart speaker is a small Linux computer with a mic array and a low power wake word chip. How it is built, tested, updated, and what voice data it keeps.

Oct 24, 202641 min read
Supply Chain Security

Email Tracking Pixels Explained: How Senders Know You Opened

A tracking pixel is a tiny remote image that tells the sender when you opened an email, from where and on what. How it works and how to block it.

Oct 24, 202645 min read
Supply Chain Security

The Agentic AI Foundation Explained: MCP and Agent Standards Governance

The Agentic AI Foundation is a Linux Foundation directed fund that hosts MCP, AGENTS.md and goose. Learn how it is governed and what it means for trust.

Oct 24, 202642 min read
Supply Chain Security

OpenTelemetry GenAI Semantic Conventions: Tracing LLM Calls and Agents

The OpenTelemetry GenAI conventions name the spans, attributes and metrics for LLM calls, agents, tools and MCP. What they record and how to redact it.

Oct 24, 202647 min read
Supply Chain Security

Agent Client Protocol Explained: How Editors Talk to Coding Agents

ACP lets any editor run any coding agent over JSON-RPC on stdio, with streamed tool calls and permission prompts. How it works and how to secure it.

Oct 24, 202645 min read
Supply Chain Security

Ecma TC54 Explained: The Committee Behind CycloneDX, purl, TEA and CLE

Ecma TC54 is the Ecma International committee that standardises CycloneDX, Package URL, CLE and TEA. How it works, what it published and how to join.

Oct 24, 202644 min read
Supply Chain Security

OpenChain ISO/IEC 18974 Explained: Security Assurance for Open Source

ISO/IEC 18974:2023 sets the minimum process for handling known vulnerabilities in open source you ship: a policy, roles, an SBOM and a public contact.

Oct 24, 202645 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.