Product
Safeguard Q3 2025 Release Recap
A quarterly recap of everything Safeguard shipped in Q3 2025 across Griffin, Eagle, Lion, and Gold — with the improvements, deprecations, and next steps.
Jan 5, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedVulnerability Analysis
Log4Shell Vulnerability (CVE-2021-44228) Explained
The most critical vulnerability in a decade dropped on a Friday. Log4Shell affects virtually every Java application and is trivial to exploit. Here's what happened.
Jan 5, 20265 min read
Product
Safeguard v5: One Year In — What We Built, What We Learned
A retrospective on Safeguard v5's first year in production, the features that resonated, and where we're headed next.
Jan 5, 20266 min read
Risk Management
Vendor Concentration Risk: When Your Entire Stack Depends on One Company
Relying too heavily on a single vendor creates systemic risk that most organizations dramatically underestimate. Here is how to measure and manage it.
Jan 5, 20266 min read
Application Security
gRPC Security Considerations for Microservice Architectures
gRPC powers high-performance microservice communication, but its binary protocol and code generation model introduce unique security challenges most teams overlook.
Jan 5, 20266 min read
Vulnerability Analysis
EJS template engine RCE via client option (CVE-2022-29078)
CVE-2022-29078 lets attackers achieve remote code execution in EJS via unsanitized render options. Affected versions, severity, and fixes inside.
Jan 5, 20267 min read
Regulatory Compliance
PCI DSS software composition analysis requirements for pa...
What PCI DSS 4.0.1 actually requires for tracking third-party and open-source code in payment software, and how SBOMs and SCA tooling satisfy it.
Jan 5, 20267 min read
Vulnerability Analysis
Grafana CVE-2021-43798: Directory Traversal in Everyone's Favorite Dashboard Tool
CVE-2021-43798 allowed unauthenticated directory traversal in Grafana, exposing configuration files and credentials. Exploitation was trivial and widespread.
Jan 5, 20266 min read
Vulnerability Research
Zero-Day Vulnerabilities in Open Source: 2021 in Review
2021 saw a record number of zero-day exploits targeting open-source software. From Log4Shell to ProxyShell, here's what happened and what it means for defenders.
Jan 5, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.