Compliance
How to configure AWS Config for continuous compliance mon...
A step-by-step guide to configure AWS Config compliance monitoring: rules setup, conformance packs, alerting, remediation, and multi-account aggregation.
Feb 12, 20268 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedVulnerability Analysis
What Was the Shellshock Vulnerability
Shellshock (CVE-2014-6271) let attackers run code on millions of Bash-based systems via a single crafted header. Here's the full breakdown and fix.
Feb 12, 20268 min read
Compliance
How to meet SOC 2 audit logging requirements
A step-by-step guide to meeting SOC 2 audit logging requirements: what to log, retention, access controls, alerting, and how to verify your controls before an audit.
Feb 12, 20268 min read
AI Security
Container-Specific Vulnerability Management Tools, Compared
A field guide to container-specific vulnerability management tools: what Trivy, Grype, Clair, Docker Scout, and Anchore actually catch, and where each falls short.
Feb 11, 20267 min read
Open Source
npm chai: A Security Review and Safe Usage Guide
Chai is a staple assertion library for JavaScript testing. Here is an honest look at the security profile of the npm chai package and how to keep it out of your production bundle.
Feb 11, 20265 min read
Cloud Security
GuardDuty Extended Threat Detection: What Defenders Actually Get
GuardDuty's extended threat detection correlates findings across signals into attack sequences. We dig into where it helps, where it misses, and how to wire it into supply chain incident response.
Feb 11, 20267 min read
AI Security
Enterprise AI Incident Response Playbooks
AI incidents are not the same shape as traditional security incidents. The playbooks need to be specific to how AI systems actually fail.
Feb 11, 20262 min read
AI Security
Griffin AI vs Gemma for Lightweight Scanning
Gemma is built for efficiency. Can a small open-weight model replace Griffin AI for lightweight scanning workflows, or does the engine still matter?
Feb 11, 20267 min read
AI Security
Engineer-Hour Savings: Griffin AI vs Mythos
The real cost of a scanner is not the subscription. It is the engineer hours lost to false positives, bad remediations, and noisy queues. We do the math.
Feb 11, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.