Dependency Security
Java Maven and Gradle Dependency Security
How to secure your Java dependency chain across Maven and Gradle builds, from signature verification to repository management.
Jan 23, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Git Credential Security for Organizations: Locking Down Source Access
Git credentials are the keys to your source code. Here is how organizations should manage them to prevent unauthorized access and credential theft.
Jan 23, 20264 min read
AI Security
SPDX Coverage: Griffin AI vs Mythos
SPDX is the format auditors ask for, the format regulators reference, and the format most enterprise procurement teams standardize on. Griffin AI treats it as a first-class graph. Mythos-class tools treat it as a long document.
Jan 23, 20267 min read
AI Security
Griffin AI vs Gemini Code Assist: Security
Gemini Code Assist makes developers faster. But faster is not safer. Here's how Griffin AI layers a security engine onto the same developer workflow.
Jan 23, 20267 min read
AI Security
Instruction/Data Conflation: Why Prompt Injection Persists
Prompt injection is not a vulnerability that will be patched. It is what happens when a system cannot distinguish the instructions it is supposed to follow from the data it is supposed to process.
Jan 23, 20267 min read
Vulnerability Analysis
Fortinet FortiProxy CVE-2023-25610: Buffer Underwrite in Network Security Infrastructure
CVE-2023-25610 allowed unauthenticated RCE on FortiOS and FortiProxy through a buffer underwrite vulnerability. Another critical flaw in perimeter security appliances.
Jan 23, 20266 min read
Industry Analysis
State of Cloud Security Report Overview
This year's cloud security reports point to the same conclusion: detection isn't the bottleneck anymore — identity sprawl, supply chain risk, and slow remediation are.
Jan 23, 20268 min read
Social Engineering
Email Security and Supply Chain Phishing Attacks
Phishing remains the top initial access vector for supply chain attacks. Targeted emails against developers, maintainers, and DevOps engineers open the door to code injection, credential theft, and pipeline compromise.
Jan 23, 20266 min read
Architecture
Safeguard Knowledge Graph Architecture
How Safeguard's knowledge graph unifies components, vulnerabilities, policies, and runtime evidence into a single queryable substrate that powers every product surface.
Jan 23, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.