Cloud Security
AWS ECR Container Scanning: Beyond the Defaults
A deep dive into ECR scanning options, from basic Clair scanning to enhanced Inspector integration, and what most teams get wrong.
Jan 18, 20268 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Culture
Scaling a Security Champions Network
Security teams can't be everywhere. A well-structured security champions network extends security expertise into every development team without bottlenecking delivery.
Jan 18, 20267 min read
Threat Analysis
Browser Extension Supply Chain Attacks: The Overlooked Threat Vector
Browser extensions have become a prime target for supply chain attackers. With access to browsing data, credentials, and session tokens, a compromised extension is a skeleton key to your organization.
Jan 18, 20267 min read
AI Security
SSO & SCIM: Griffin AI vs Mythos
Enterprise identity is not a paywall. It is the substrate on which every other security control depends, and it is where Mythos-class vendors quietly fall behind.
Jan 18, 20267 min read
AI Security
Griffin AI vs Mistral Large for Remediation
Mistral Large is a strong reasoning model, but remediation is more than generating a diff. We look at what Griffin AI adds for production fix workflows.
Jan 18, 20267 min read
AI Security
Enterprise AI Agent Deployment Lessons, 2026
Lessons learned from a year of enterprise AI agent deployments: what worked, what failed, and what we would do differently starting now.
Jan 18, 20267 min read
AI Security
AI Safety Eval Datasets as Supply Chain
The datasets you use to evaluate model safety are themselves a supply chain, and almost nobody is treating them that way. A senior engineer's audit of how eval corpora get poisoned, contaminated, and silently drifted.
Jan 18, 20267 min read
Container Security
Podman vs Docker Security: What Actually Changes When You Drop the Daemon
Podman is daemonless, rootless by default, and fork-exec instead of client-server. Here is what those architectural differences mean for container security in practice.
Jan 18, 20267 min read
Application Security
WAF Rule Writing Best Practices: From Alert Fatigue to Actionable Protection
Most WAF deployments drown in false positives because the rules were never tuned. Here is how to write rules that protect without blocking legitimate traffic.
Jan 18, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.