Security
How to Set Up a Secure Source Code Repository
What makes a source code repository secure, from access control and secret scanning to branch protection and dependency review, with practical defaults.
Mar 29, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
How to Use Git Branch (and git checkout) Safely
A working reference for creating, switching, and checking out Git branches, plus the security habits that keep secrets and bad commits out of your history.
Mar 29, 20266 min read
Vulnerability Response
CVE-2025-53521 in F5 BIG-IP APM: Patch Posture & SBOM Response
F5 BIG-IP APM bug reclassified from DoS to RCE at CVSS 9.8 and landed on CISA KEV. Defender playbook for the late-cycle severity surprise.
Mar 29, 20267 min read
Open Source
serverless-webpack: Secure Bundling for Lambda Functions
serverless-webpack bundles your Lambda handlers with Webpack so each function ships only the code it needs. Here is how it works and the supply chain risks to watch when you adopt it.
Mar 29, 20266 min read
Industry Events
RSAC 2026's Five Most Dangerous Attack Techniques: Every One Now Runs on AI
For the first time in the history of the SANS keynote, all five of the most dangerous new attack techniques carry an AI dimension — from AI-generated zero-days to your vendor's vendor's vendor. Here's the honest breakdown, plus what defenders should actually do.
Mar 29, 20267 min read
Security
What Does CWE Stand For? Common Weakness Enumeration Explained
CWE stands for Common Weakness Enumeration, a community catalog of software and hardware weakness types. Here is what it is and how it differs from CVE.
Mar 29, 20265 min read
Vulnerability Analysis
Citrix Bleed 2 Implications: What CVE-2024-6235 Means for NetScaler Operators
CVE-2024-6235 was the followup to the original Citrix Bleed and exposed sensitive data from NetScaler ADC and Gateway appliances. The technical details and what changes.
Mar 29, 20265 min read
AI Security
Transitive Dependency Fix Cascades, Managed
Fixing a transitive dependency is rarely a single bump. It is a cascade. Here is how to manage those cascades without flooding reviewers or breaking builds.
Mar 29, 20267 min read
Best Practices
Purple Team Exercises With Supply Chain Focus
Most purple team exercises stop at the perimeter. A supply-chain-focused exercise probes the dependency graph, the build pipeline, and the trust assumptions in your SBOM.
Mar 29, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.