Vulnerability Analysis
What is SQL Injection (SQLi)
SQL injection (CWE-89) lets attackers rewrite database queries via untrusted input — here's how SQLi works, its types, severity, and how to prevent it.
Apr 1, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
FedRAMP vulnerability scanning requirements explained
FedRAMP mandates monthly vulnerability scans and 30-day remediation windows. Here's what Rev 5 requires, and why minimal images like Chainguard's don't exempt you.
Apr 1, 20267 min read
Industry Events
RSAC 2026 Floor Report: Agentic AI Security, Platformization, and the Consolidation Debate
What the Moscone show floor actually said about platformization vs. best-of-breed, data sovereignty, and how agentic AI security rewrote the enterprise buying conversation at RSAC 2026.
Mar 31, 20267 min read
DevSecOps
AWS ECR Image Signing With Cosign In Production
Cosign-signed images in ECR are no longer a side project. This is how to roll out signing across an AWS estate without breaking the deploy pipeline.
Mar 31, 20267 min read
Best Practices
Break-Glass Workflow Design: Audited Bypass That Works
Every policy needs a bypass path or it will be routed around. The trick is making the bypass auditable, time-bound, and rare enough to remain meaningful.
Mar 31, 20267 min read
Industry Analysis
Dependency Confusion Five Years In: Evolution
Dependency confusion turned five in 2026. We look at how the attack has evolved, why it still works, and what defenders have actually learned.
Mar 31, 20268 min read
Regulatory Compliance
IL7 Air-Gap Deployment Supply Chain Controls
IL7 environments are isolated by design but inherit every supply chain risk in the artifacts that cross the gap. Here is how to lock down the inbound flow.
Mar 31, 20268 min read
AI Security
Responsible Disclosure For Discovered Zero-Days
When your pipeline starts producing zero-days, you inherit responsible disclosure obligations. Here is how to do it well, with the artefacts the pipeline already gives you.
Mar 31, 20267 min read
Vulnerability Management
Risk-Based Prioritisation Beyond CVSS
CVSS tells you severity. It does not tell you risk. Here is how reachability, exploitability, and AI context produce a prioritisation model that survives reality.
Mar 31, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.