Dependency Security
Kotlin Gradle Dependency Verification
Implement dependency verification in Kotlin Gradle projects with checksums, PGP signatures, and repository filtering.
Jan 29, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSBOM
Automated SBOM Drift Detection: When Your Bill of Materials Goes Stale
An SBOM that does not match what is actually deployed is worse than no SBOM at all. Here is how to detect and prevent SBOM drift automatically.
Jan 29, 20267 min read
DevSecOps
Harness CI/CD Security Features
Leveraging Harness platform security capabilities including governance policies, secret management, and pipeline security controls.
Jan 29, 20265 min read
Incident Analysis
MOVEit Vulnerability Mass Exploitation: A Field Analysis
Inside the Cl0p ransomware gang's zero-day attack on Progress MOVEit Transfer, the CVE-2023-34362 timeline, and the supply chain lessons it exposed.
Jan 29, 20265 min read
Application Security
Runtime Application Self-Protection (RASP): A Practical Guide
RASP embeds security directly into the application runtime, detecting and blocking attacks from inside the app. It's powerful, controversial, and misunderstood. Here's what actually works.
Jan 29, 20269 min read
Security Architecture
Microsegmentation for Software Supply Chain Security
Microsegmentation limits lateral movement after a breach. Applied to software supply chains, it contains the blast radius when a dependency, build tool, or vendor is compromised.
Jan 29, 20265 min read
DevSecOps
SpotBugs Security Detectors for Java: A Practical Guide
SpotBugs with Find Security Bugs is the most effective free security analysis tool for Java. Here is how to get real results from it.
Jan 29, 20264 min read
Vulnerability Analysis
Microsoft Teams Vulnerability: External Tenant Attacks and the Collaboration Security Gap
Researchers demonstrated that Microsoft Teams' default configuration allowed external attackers to deliver malware directly to employees, bypassing email security controls entirely.
Jan 29, 20266 min read
Industry Guides
Automotive Cybersecurity: UNECE WP.29 and Software Supply Chain Security
Connected vehicles depend on millions of lines of code. UNECE WP.29 regulations now require automotive manufacturers to manage software supply chain risks.
Jan 29, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.