AI Security
AI Cybersecurity Companies and Vendors: The Landscape
AI cybersecurity companies split into three distinct groups doing very different work, and confusing them is the fastest way to buy the wrong tool.
Mar 27, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Git Aliases: Faster Workflows Without Sacrificing Security
Git aliases save keystrokes, but a careless one can hide destructive commands or leak secrets. Here are the aliases worth setting and the ones to think twice about.
Mar 27, 20265 min read
Security
typescript-plugin-css-modules: A Dev Dependency Security Guide
typescript-plugin-css-modules gives you typed CSS Modules imports. Here is what it does, why build-time dev tooling is part of your supply chain, and how to keep it safe.
Mar 27, 20266 min read
Vulnerability Analysis
What is LDAP Injection
LDAP injection lets attackers manipulate directory queries to bypass authentication or dump directory data. Here's how it works, real CVEs, and how to stop it.
Mar 27, 20266 min read
Container Security
Docker image security fundamentals (quick-start guide)
A practical guide to docker image security: how vulnerabilities hide in base images, common misconfigurations, how scanning works, and a five-step quick-start checklist.
Mar 27, 20268 min read
AppSec
Bootstrapping a Secure Website Scan Workflow on a Budget
A small team can build a real scanning habit with zero budget — the trick is turning one-off checks into a repeatable workflow before traffic (and risk) grows.
Mar 27, 20266 min read
Containers
Rebuilding Docker Images: Cache, Patching, and Reproducibility
A plain docker build reuses cached layers and silently skips your security patches. Here is how the cache actually works, how to force a real rebuild, and how to keep rebuilds reproducible.
Mar 27, 20266 min read
Vulnerability Analysis
What is NoSQL Injection
NoSQL injection lets attackers bypass logins or run code using MongoDB operators like $ne and $where. See real CVEs, examples, and effective defenses.
Mar 27, 20267 min read
Engineering
Container Image Digests vs Tags: Why Pinning Matters
A tag is a mutable pointer; a digest is the image. Pinning by digest is the difference between deploying what you tested and deploying whatever the registry says today.
Mar 27, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.