AI Security
Golden Dataset Design: Griffin AI vs Mythos
Benchmark scores are only as honest as the dataset behind them. Griffin AI publishes golden-dataset design notes; Mythos-class tools rarely explain theirs.
Feb 20, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Safeguard Portal: Giving Your Customers a Window Into Your Supply Chain
The Safeguard Portal lets you share SBOM data, vulnerability status, and compliance documentation with customers through a branded, self-service interface.
Feb 20, 20267 min read
Application Security
CodeQL vs Semgrep: A 2026 Buyer Comparison
A practical head-to-head between CodeQL and Semgrep in 2026: query power, performance, rule authoring, and where each tool earns its place in a modern SAST program.
Feb 20, 20265 min read
Supply Chain Security
How One Engineer's Curiosity Saved Linux: The XZ Utils Backdoor Discovery Story
Andres Freund noticed SSH was 500ms slower than expected. That observation prevented the most dangerous supply chain attack in open source history from reaching stable Linux distributions.
Feb 20, 20267 min read
Vulnerability Management
KEV, EPSS, CVSS: Which Signal Should Drive Patching?
CVSS measures severity, EPSS predicts exploitation, KEV confirms active exploitation. Each answers a different question, and patching policy should use all three.
Feb 20, 20267 min read
Events
Open Source Security Summit 2026: Key Takeaways
We attended the Open Source Security Summit 2026 and came back with five actionable insights for security teams.
Feb 20, 20266 min read
Tools
Snyk vs Aikido Comparison
Snyk vs Aikido compared on pricing, vulnerability database size, alert noise, CI/CD setup, and enterprise fit — with concrete numbers.
Feb 20, 20267 min read
Software Supply Chain Security
SCA with Reachability: A Buyer Guide for 2026
How to evaluate software composition analysis tools that claim reachability analysis, including the technical questions that separate real implementations from marketing.
Feb 20, 20265 min read
Application Security
VS Code Extensions and Supply Chain Risk in 2026
VS Code extensions run with full editor privileges and broad filesystem access. A look at the real attacks, the marketplace's blind spots, and how to harden the workstation.
Feb 20, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.