AI Security
Golden Dataset Design: Griffin AI vs Mythos
Benchmark scores are only as honest as the dataset behind them. Griffin AI publishes golden-dataset design notes; Mythos-class tools rarely explain theirs.
Feb 20, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
CSRF Modern Forms: Griffin AI vs Mythos
CSRF in 2026 is not the 2012 attack. SameSite cookies, fetch metadata, and modern frameworks changed the landscape. Detection needs to keep up.
Feb 20, 20263 min read
AI Security
Griffin AI vs Cursor Tab for Security Review
Cursor Tab is excellent at in-editor autocomplete. For security review, the workflow is different enough that the right answer is to use both.
Feb 20, 20262 min read
Product
Safeguard Portal: Giving Your Customers a Window Into Your Supply Chain
The Safeguard Portal lets you share SBOM data, vulnerability status, and compliance documentation with customers through a branded, self-service interface.
Feb 20, 20267 min read
Application Security
CodeQL vs Semgrep: A 2026 Buyer Comparison
A practical head-to-head between CodeQL and Semgrep in 2026: query power, performance, rule authoring, and where each tool earns its place in a modern SAST program.
Feb 20, 20265 min read
Supply Chain Security
How One Engineer's Curiosity Saved Linux: The XZ Utils Backdoor Discovery Story
Andres Freund noticed SSH was 500ms slower than expected. That observation prevented the most dangerous supply chain attack in open source history from reaching stable Linux distributions.
Feb 20, 20267 min read
Tools
Snyk vs Aikido Comparison
Snyk vs Aikido compared on pricing, vulnerability database size, alert noise, CI/CD setup, and enterprise fit — with concrete numbers.
Feb 20, 20267 min read
Events
Open Source Security Summit 2026: Key Takeaways
We attended the Open Source Security Summit 2026 and came back with five actionable insights for security teams.
Feb 20, 20266 min read
Vulnerability Management
KEV, EPSS, CVSS: Which Signal Should Drive Patching?
CVSS measures severity, EPSS predicts exploitation, KEV confirms active exploitation. Each answers a different question, and patching policy should use all three.
Feb 20, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.