AI Security
Why Autonomous Coding Agents Need Their Own Threat Model
Coding agents run with real credentials and no pause button. Here is the threat model that treats them as autonomous infrastructure, not junior developers.
May 24, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSupply Chain
SCA Security Testing: A Workflow Guide
SCA security testing only works when it's wired into an actual development workflow — here's what that pipeline looks like from commit to merge to production monitoring.
May 24, 20265 min read
Open Source Security
PyPI's aliyun-ai-labs Campaign: Three Packages, One Targeted Region
Three PyPI packages impersonating Alibaba's AI Labs SDK exfiltrated .gitconfig data from developer machines in a regionally targeted 2025 espionage campaign.
May 24, 20266 min read
AppSec
JavaScript Security Scanner: How It Works and What to Use
A JavaScript security scanner analyzes your code and dependencies for vulnerabilities. Here's what the different scanner types catch and how to wire them into CI.
May 24, 20266 min read
Application Security
Comparing Node.js frameworks for security: Express, Fastify, NestJS
Express, Fastify, and NestJS compared on real CVE history, default security posture, and dependency risk — plus how to close the gaps framework choice alone can't.
May 24, 20267 min read
AppSec
Automated Vulnerability Scanning Tools: How They Work and What to Look For
Automated vulnerability scanning tools turn a once-a-year audit into a continuous safety net — if you understand what each type actually inspects.
May 24, 20266 min read
Buyer's Guides
Mend.io vs Black Duck: choosing an AppSec/SCA platform
A practical, evidence-based look at how Mend.io and Black Duck approach SCA — and where Safeguard's reachability-aware scanning and SBOM tooling differ.
May 24, 20267 min read
AI Security
The Jailbreaking Economy: How Model Vulnerabilities Get D...
Jailbreak prompts now trade like exploits: sold as $200/month "dark" chatbots, bountied by vendors for up to $15,000. Here's how that market actually works.
May 24, 20268 min read
Application Security
5 Node.js security code snippets every backend developer should know
Five real Node.js vulnerability patterns with vulnerable-vs-fixed code: prototype pollution, NoSQL injection, missing headers, path traversal, and JWT flaws.
May 24, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.