Product
GovRAMP and TX-RAMP: Vulnerability Evidence for SaaS Vendors
GovRAMP wants monthly scans, a POA&M and fixes in 30, 90 or 180 days; TX-RAMP wants quarterly or annual CVSS reports. Here is the evidence to keep.
Oct 25, 202637 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSupply Chain Security
CHAOSS Explained: Health Metrics, Metrics Models, Augur and GrimoireLab
CHAOSS is a Linux Foundation project that defines open source community health metrics and metrics models, plus the GrimoireLab and CollectOSS tools.
Oct 25, 202640 min read
Supply Chain Security
Tool Selection for AI Agents: Tool Search, Deferred Loading, Poisoning
AI agents pick tools from names, descriptions and schemas in context. Why big catalogs hurt accuracy, how tool search helps, how descriptions get poisoned.
Oct 25, 202642 min read
Supply Chain Security
Eclipse SW360 Explained: Component Catalog, License Clearing and SBOMs
Eclipse SW360 is an open source component catalog for license clearing, obligations and SBOM import and export. Here is how it works and how to run it.
Oct 25, 202640 min read
Supply Chain Security
OTS Breach: Up to 730,000 Customers and Driver's Licence Numbers
Okinawa Tourist (OTS) says data on up to about 730,000 customers leaked, including Japanese licence numbers. What leaked, what is unknown and what to do.
Oct 25, 202635 min read
Supply Chain Security
FFVoile Breach: 2 Million Records Taken via a Data Analysis Tool
France's sailing federation says a data tool flaw let an attacker extract over 2 million records, some club IBANs included. What leaked and what to do.
Oct 25, 202635 min read
Product
Hand Exploited Dependency Findings to Your Security Operations Team
Send your SOC only KEV-listed, reachable findings on exposed services, with owner, exposure and fix date, and close each record when the fix deploys.
Oct 25, 202638 min read
Supply Chain Security
How Quantum Programs Are Compiled: OpenQASM 3 and Qubit Routing
A quantum compiler maps circuits onto a chip's qubits, inserts SWAPs and rewrites gates into native ones. OpenQASM 3, routing and the open source SDKs.
Oct 25, 202640 min read
Supply Chain Security
Z-Wave Explained: Sub-GHz Mesh, S2 Security, SmartStart and Long Range
Z-Wave is a sub-GHz smart home protocol with a source routed mesh. How S2, SmartStart QR provisioning and Z-Wave Long Range work, and how to secure them.
Oct 25, 202635 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.