Product
DAST for APIs From an OpenAPI Spec in Safeguard
Safeguard DAST can test an API from its OpenAPI or Swagger file, but only on verified, allow-listed hosts. Here is the flow and its limits.
Oct 25, 202638 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
SAST for Python in Safeguard: Dataflow Traces and CWE Mapping
Safeguard SAST traces untrusted input to dangerous sinks in Python code and maps each finding to CWE and OWASP. How to run it, read it, gate it.
Oct 25, 202638 min read
Product
Scan Container Images in Safeguard: OS Packages in Image Layers
Safeguard reads every layer of a container image, lists OS and app packages, matches them to CVEs with EPSS and KEV, and tells you which fix lives where.
Oct 25, 202639 min read
Supply Chain Security
PKCS #11 Explained: Slots, Sessions, Mechanisms and Key Attributes
PKCS #11 is the OASIS C API, called Cryptoki, that apps use to drive HSMs and smart cards. Learn slots, sessions, mechanisms and risky key attributes.
Oct 25, 202641 min read
Product
SAST for JavaScript and TypeScript in Safeguard
Safeguard SAST traces untrusted input from source to sink in JavaScript and TypeScript and maps each finding to a CWE and OWASP category.
Oct 25, 202639 min read
Product
How to Assess Software Suppliers With C2M2 at a US Electric Utility
Use C2M2's THIRD-PARTIES domain as the maturity ladder and CIP-013 as the floor: tier suppliers, ask for SBOMs, verify integrity, watch KEV after purchase.
Oct 25, 202639 min read
Supply Chain Security
NEC Subcontractor Breach: Osaka Metropolitan Ransomware, 77,851 Leaked
An NEC subcontractor breach led to ransomware at Osaka Metropolitan University and a 77,851 person leak at Osaka University. What happened, what to check.
Oct 25, 202634 min read
Supply Chain Security
ASPA Explained: RPKI Route Leak Detection and How to Deploy It
ASPA lets a network sign the list of its transit providers in the RPKI so routers can reject leaked AS paths. How it works, its limits and how to deploy it.
Oct 25, 202639 min read
Supply Chain Security
ASUS Router Flaws CVE-2026-93489 and CVE-2026-75775 Explained
ASUS fixed three High rated flaws in 3.0.0.6_102 router firmware on 23 Oct 2026. No exploitation is reported. Update firmware and lock down admin access.
Oct 25, 202632 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.