AI Security
Griffin AI vs Claude Computer Use: Security
Claude's Computer Use lets an agent drive a GUI. For security, this is powerful and dangerous in equal measure. The architecture around it matters.
Mar 14, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Cryptography Misuse Detection: Griffin AI vs Mythos
Crypto misuse is not about broken algorithms. It is about misused parameters, missing checks, and the gap between "it compiles" and "it is secure."
Mar 14, 20265 min read
Regulatory Compliance
HIPAA Supply Chain Evidence For Business Associates
HIPAA Security Rule expectations now reach into the software supply chain. Learn how Business Associates can produce evidence that satisfies OCR scrutiny.
Mar 14, 20267 min read
Best Practices
IR Handoff From SecOps To Engineering
The handoff from incident response to engineering is where remediation goes to die. Here is a blueprint that turns a vague Slack message into a closed loop.
Mar 14, 20267 min read
Regulatory Compliance
SEC Cyber Disclosure Rules: Year Two
A senior engineer's view of the second-year impact of SEC cybersecurity disclosure rules, what filings actually look like, and where supply chain risk fits in.
Mar 14, 20268 min read
Compliance
CI/CD Audit Pipeline Checklist 2026
An auditor's checklist for CI/CD pipelines in 2026 covering build provenance, secret management, runner isolation, and the evidence to collect for SOC 2 and FedRAMP.
Mar 14, 20265 min read
AI Security
What Is Explainable AI? A Security Practitioner's Guide
Explainable AI makes model decisions inspectable so security teams can trust, audit, and defend them. Here is what that means in practice.
Mar 14, 20266 min read
AI Security
AI Agent Tool Confused Deputy Problem in 2026
A senior engineer's take on the confused deputy problem in AI agent tool use, why it keeps reappearing in 2026, and the architectural patterns that actually fix it.
Mar 14, 20267 min read
Threat Intelligence
APT29 Cloud Supply Chain Tradecraft 2025
APT29's 2024-2025 cloud-native tradecraft — from Midnight Blizzard's Microsoft intrusion to the Teams phishing pivots — shows how SVR targets identity as supply chain.
Mar 14, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.