Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
tensorlake@0.5.144 ran a credential stealer from a preinstall hook despite valid npm provenance. Check if you installed it, what to rotate, what helps.
Eight eMudhra intermediate CA keys were so weak anyone could compute them. Browsers blocked them fast; servers, containers and devices still need updates.
PwnEscape is a Linux kernel flaw that can let a KVM guest reach host memory. Who is affected, which distros have fixes, and how to patch and reboot safely.
PHP2Shell playbook: find PHP on hosts, containers, hosting panels and appliances, move to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, restart workers, verify.
PHP2Shell is two critical PHP core flaws that allow unauthenticated RCE on web servers. Upgrade to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 and restart workers.
Answer security questionnaires faster: pull SBOMs, findings, VEX and policy evidence from Safeguard, draft with Griffin, publish in a Trust Center.
Check open source licences with Safeguard: scan locally for license.json, review the Suppliers & Licenses tab, then enforce a licence policy at a gate.
Turn on Safeguard fix PRs safely: start with dry runs and draft PRs, require approval and tests, review every diff, and know how to roll a fix back.
Connect ChatGPT to the Safeguard MCP server, ask about SBOMs, components and licences in plain English, and keep the SBOM fresh with the Safeguard CLI.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
