AI Security
MCP Server Inventory: Griffin AI vs Mythos
MCP servers are privileged dependencies. An inventory that tracks them like SBOM tracks packages is the minimum bar — and not every tool meets it.
Mar 1, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedRegulatory Compliance
Government AI Procurement Supply Chain Overlap
Government AI procurement rules are colliding with software supply chain requirements. Here is how to navigate the overlap without doubling the workload.
Mar 1, 20267 min read
DevSecOps
CloudFormation, Bicep, Terraform Supply Chain Evidence
IaC frameworks differ in how they generate supply chain evidence. This is the 2026 guide to audit-ready proof from CloudFormation, Bicep, and Terraform.
Mar 1, 20268 min read
Product
Safeguard IDE Extension: Supply Chain Intelligence in Your Editor
The Safeguard VS Code extension surfaces vulnerability data, dependency health, and policy violations directly in your editor as you write code.
Mar 1, 20266 min read
Industry Analysis
Elastic Security Supply Chain Signals
How to surface software supply chain threats in Elastic Security using EQL, detection rules, and the Elastic Common Schema for build pipeline and registry events.
Mar 1, 20267 min read
Incident Analysis
XZ Utils Backdoor: One Year Retrospective
A year after the XZ Utils backdoor was caught by Andres Freund at Microsoft, what did we fix, what did we ignore, and what still gets packaged into Linux distros?
Mar 1, 20267 min read
AI Security
What is Sensitive Information Disclosure in LLMs
LLM sensitive information disclosure leaks training data, prompts, and secrets through model outputs. Real incidents, causes, and defenses explained.
Mar 1, 20266 min read
Cloud Security
Container Runtime Security in 2026: What's Changed and What Hasn't
Container security has matured significantly, but runtime protection remains a weak spot. Here's a practical guide to what works.
Mar 1, 20266 min read
Open Source Security
Bundler Lockfile Security Practices
How to use Gemfile.lock as a real security artifact: checksums, frozen mode, reproducible resolves, and what changed in Bundler 2.5's expanded lockfile format.
Mar 1, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.