Software Supply Chain Security
Best SBOM tools compared (including Trivy)
Trivy generates SBOMs fast at scan time. Safeguard turns those SBOMs into a versioned, queryable inventory you can match against new CVEs org-wide.
Apr 28, 20268 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Checkmarx Careers: What a Career in Application Security Involves
Curious about Checkmarx careers or breaking into AppSec generally? Here is what these roles actually involve, the skills that matter, and how to prepare.
Apr 28, 20266 min read
Containers
Python Dockerfile Best Practices for Secure, Small Images
The Python Dockerfile best practices that matter most for security are running as a non-root user, choosing a slim base, using multi-stage builds, and pinning dependencies. Here is a working reference Dockerfile and why each line is there.
Apr 28, 20265 min read
Application Security
Browser extension security risks for developers
Cyberhaven's Chrome extension breach hit 400,000 users in hours. Here's how attackers hijack trusted extensions, and how to detect the risk before it spreads.
Apr 28, 20267 min read
AppSec
How to Fix Cross-Site Scripting Vulnerabilities in Java (With Examples)
A practical walkthrough of how to fix cross site scripting vulnerabilities in Java: context-aware output encoding, template auto-escaping, and where servlet code goes wrong.
Apr 28, 20266 min read
DevSecOps
GitHub secret scanning vs dedicated scanning tools
GitHub secret scanning vs Trivy: how push protection, validity checks, and multi-source coverage differ, and where Safeguard fits for cross-repo remediation.
Apr 28, 20267 min read
Security
How Application Security Risk Management Actually Works in Practice
A working model for application security risk management: how to inventory assets, rate risk you can act on, prioritize by exploitability and impact, and prove the program is reducing risk.
Apr 28, 20267 min read
Application Security
Electron app security best practices
nodeIntegration, contextIsolation, Chromium patch lag, and npm supply chain risk: the Electron security best practices that actually stop RCE.
Apr 28, 20267 min read
Security
Risk Management Applications: How to Secure the Tools You Rely On
Risk management applications concentrate your most sensitive data, which makes them a target. Here is how to think about securing the software that manages your risk.
Apr 28, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.