Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (7845)AI Security (784)Vulnerability Analysis (574)Security (522)DevSecOps (496)Application Security (484)Open Source Security (412)AppSec (306)Compliance (302)Industry Analysis (295)Container Security (284)Open Source (252)Best Practices (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (178)Incident Analysis (139)Regulatory Compliance (138)Vulnerability Management (135)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (76)Vulnerabilities (72)Product (69)Threat Intelligence (65)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Engineering (24)Tutorials (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Agent Security (16)Vulnerability Response (16)Threat Research (16)Risk Management (16)Tool Reviews (16)Cryptography (15)Compliance & Frameworks (15)Security Concepts (15)Identity Security (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Company (9)Culture (9)Enterprise (9)Standards (8)Strategy (8)Architecture (8)Secure Development (7)Industry Insights (7)Industry Trends (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Dev Practices (6)Security Operations (6)Research (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Product Launch (4)Policy (4)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Offensive Security (4)Tool Comparisons (4)Build Security (3)Healthcare Security (3)Governance (3)Social Engineering (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Product Update (1)Healthcare (1)Language Security (1)Emerging Threats (1)Privacy (1)Events (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed
Concepts

What Is Security Hardening?

Security hardening reduces a system's attack surface by removing what it does not need and configuring the rest safely. Learn the principles, benchmarks, and how to apply it.

Feb 27, 20265 min read
AI Security

GitHub Container Registry (ghcr.io): A Practical Security Guide

GitHub Container Registry (ghcr.io) is convenient and tightly integrated with Actions, but the defaults can leak images and tokens. Here's how to lock it down properly.

Feb 27, 20266 min read
Infrastructure Security

Public key infrastructure (PKI)

What is PKI? A precise breakdown of public key infrastructure, the PKI certificate chain, root and intermediate CAs, and how trust hierarchies can break.

Feb 27, 20267 min read
Product

Safeguard MCP Server: Public Release Details

The Safeguard MCP Server is publicly available and works with Claude Desktop, claude.ai, Claude Code, ChatGPT, Cursor, Gemini, and Grok. Here is the tool surface.

Feb 27, 20267 min read
Vulnerabilities

CVE-2022-24785: The Moment.js Path Traversal, Explained

A user-controlled locale string was all it took: how CVE-2022-24785 let attackers traverse paths through Moment.js locale loading on Node.js, and why the fix is a one-line upgrade.

Feb 27, 20265 min read
Vulnerabilities

CVE-2019-8331: The Bootstrap XSS Vulnerability, Explained

CVE-2019-8331 let attackers inject script through Bootstrap's tooltip and popover template options, a pattern that recurred across several Bootstrap CVEs before 4.3.1 finally closed it.

Feb 27, 20264 min read
Regulatory Compliance

Utilities Sector NERC CIP Software Supply Chain

NERC CIP-013 turned software supply chain into a regulated obligation for the bulk electric system. A practical look at what utilities are actually doing.

Feb 27, 20267 min read
Cryptography

Elliptic curve cryptography (ECC)

A precise, technical answer to what is elliptic curve cryptography — plus how ECC vs RSA, ECDSA signatures, and ECDH key exchange secure modern systems.

Feb 27, 20267 min read
Regulatory Compliance

SOX IT Controls Meet Software Controls

Sarbanes-Oxley IT general controls predate modern software delivery. Here's how change management, access, and segregation of duties controls actually look when applied to CI/CD pipelines and software components.

Feb 27, 20267 min read
Page 655 of 872

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.

Blog (Page 655) | Safeguard — Software Supply Chain Security Insights