Resources

Supply Chain Security, in plain English.

Name: Safeguard
Brand: Safeguard
Availability: PreOrder

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

Filter

All (50)AI Security (784)Vulnerability Analysis (574)Security (522)DevSecOps (496)Application Security (484)Open Source Security (412)AppSec (306)Compliance (302)Industry Analysis (295)Container Security (284)Open Source (252)Best Practices (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (178)Incident Analysis (139)Regulatory Compliance (138)Vulnerability Management (135)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (76)Vulnerabilities (72)Product (69)Threat Intelligence (65)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Engineering (24)Tutorials (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Agent Security (16)Vulnerability Response (16)Threat Research (16)Risk Management (16)Tool Reviews (16)Cryptography (15)Compliance & Frameworks (15)Security Concepts (15)Identity Security (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Company (9)Culture (9)Enterprise (9)Standards (8)Strategy (8)Architecture (8)Secure Development (7)Industry Insights (7)Industry Trends (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Dev Practices (6)Security Operations (6)Research (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Product Launch (4)Policy (4)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Offensive Security (4)Tool Comparisons (4)Build Security (3)Healthcare Security (3)Governance (3)Social Engineering (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Product Update (1)Healthcare (1)Language Security (1)Emerging Threats (1)Privacy (1)Events (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed

Tools

Grype v0.108 Release Notes Walkthrough

Anchore's Grype shipped v0.108.0 in late 2025 with the new vulnerability database v6 schema, distroless support fixes, and a tightened CPE matcher.

Aug 1, 20265 min read

Tools

How deepfake fraud detection tools identify synthetic med...

A buyer's guide to real-time deepfake fraud detection tools: evaluation criteria, an honest comparison of six named vendors, and where Safeguard fits in.

Jul 30, 20268 min read

Tools

Trivy v0.69 Release Deep Dive

Aqua's Trivy hit v0.69 in late 2025 with VEX-by-default scanning, ArtifactID/ReportID provenance fields, and faster misconfig scanning. We test the upgrade on a 1.2GB image.

Jul 9, 20265 min read

Tools

Semgrep Community Fall 2025: Native Windows and 3x Multicore

Semgrep's Fall 2025 Community Edition ships native Windows binaries, a memory-efficient multicore engine, and up to 3x scan speedups. We benchmarked it.

Jul 7, 20266 min read

Tools

Cosign v2.6: New Bundle Format and Trusted Root

Sigstore's Cosign v2.6 unlocks offline verification, in-toto statement signing, and trusted-root portability. We walk through the new --new-bundle-format flag end-to-end.

Jul 4, 20265 min read

Tools

Syft v1.20 Release: Faster Scans, Smarter License Detection

Anchore's Syft v1.20 ships a refactored license cataloger, Bitnami SBOM passthrough, and a 2x speedup on filesystem scans. We tested the upgrade on five real codebases.

Jun 20, 20265 min read

Tools

CodeQL 2.22 Security Query Pack Review

GitHub's CodeQL 2.22.4 runs 478 security queries by default across 169 CWEs. We map the new queries added in 2025 and benchmark scan times on real repos.

Jun 15, 20266 min read

Tools

Best Container Base Images for Security in 2026

Chainguard, distroless, Alpine, UBI micro, Ubuntu chiseled, and scratch, compared on CVE counts, size, libc, and the operational costs nobody puts in the marketing.

Jun 2, 20267 min read

Tools