Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
The Dutch Parliament approved the Cyberbeveiligingswet on 15 April 2026, with target entry into force on 1 July 2026 — 21 months after the EU transposition deadline.
EO 14144 set ambitious supply chain rules for federal software in January 2025. EO 14306 in June reshaped them. Here is what survived, what changed, and what to plan for.
Taint and reachability sound similar and answer different questions. Here is when each one matters, where vendors blur the line, and how to use both.
AI information security is the practice of protecting the data that flows through AI systems, training sets, prompts, outputs, and the models themselves, from disclosure, poisoning, and misuse. Here is a working model of the risks and controls.
The CVEs that hurt clusters lately live at the edges: admission controllers, ingress, and image supply chains. What the recent record says about where to harden first.
adm-zip is a popular pure-JavaScript zip library for Node.js, and its history of path-traversal flaws makes safe extraction non-optional. Here is what went wrong and how to use it correctly.
Tool-using agents have become a viable exfiltration channel. The patterns showing up in incident reports, and the controls that contain them.
AI endpoint security uses machine learning to detect threats by behavior rather than signatures. Here is what it actually does, where it helps, and its limits.
How Argo CD Image Updater works, the security tradeoffs of automated image promotion, and the configuration patterns that prevent supply chain incidents.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
