Security
SLSA in Canada: A Practical Supply Chain Security Guide
How Canadian teams can adopt SLSA to harden build pipelines, prove provenance, and align with federal and provincial procurement expectations.
Apr 9, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Was ServiceNow Hacked? What the Data Exposure Incidents Actually Mean
The phrase 'ServiceNow hacked' usually points to misconfiguration and unauthenticated API access, not a core platform breach. Here is what happened and how to protect your instance.
Apr 9, 20266 min read
Open Source
Sentry React: A Security Guide
Sentry React gives you error and performance monitoring for React apps, but the SDK also collects data that can leak secrets if you misconfigure it. Here is how to run it safely.
Apr 9, 20265 min read
Open Source
What Is react-server-dom-webpack? A Security Guide
react-server-dom-webpack is the low-level React Server Components binding meta-frameworks build on. Here is what it does and where the security risks actually live.
Apr 9, 20266 min read
Open Source
react-select-async-paginate: A Security Guide
react-select-async-paginate is a thin wrapper over react-select that loads dropdown options page by page. Here is how to use it without inheriting supply chain or data-handling risk.
Apr 9, 20265 min read
DevSecOps
Pickling in Python: A Security Guide
Pickling in Python serializes objects to bytes, but unpickling untrusted data can run arbitrary code. Here is how the risk works and how to defend against it.
Apr 9, 20266 min read
Security
log4j Remediation: How to Fully Patch Log4Shell
A practical log4j remediation walkthrough: which versions actually fix Log4Shell, how to find the library transitively, and what to do when you cannot upgrade yet.
Apr 9, 20265 min read
DevSecOps
How to Use Python on Mac: Install, Switch Versions, and Set a Default
Learning how to use Python on Mac starts with not touching the system Python. Here is a clean setup for installing, switching, and pinning versions.
Apr 9, 20265 min read
AI Security
Zero-Day Discovery In Your Dependency Graph
Most zero-days that hurt enterprises in 2026 live three or four hops deep in the dependency graph. Here is what it takes to actually find them there.
Apr 9, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.