AI Security
Copilot Code Review Security: What It Misses
Copilot's code review is useful. It is also not a security review, and treating it as one is how vulnerabilities ship. Here is what it actually catches.
Feb 13, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedBest Practices
What is Threat Intelligence
Threat intelligence turns raw indicators into actionable defense. Here's what it actually is, its four types, and how it applies to software supply chains.
Feb 13, 20267 min read
SBOM & Standards
SBOMs for AI/ML Models: Why Machine Learning Needs a Bill of Materials
As AI models become critical infrastructure, the need for transparency about their components, training data, and dependencies grows urgent. Emerging standards are beginning to address this gap.
Feb 13, 20266 min read
Infrastructure Security
How to harden a Linux server
A step-by-step guide to harden Linux server security: SSH hardening, firewalls, patching, CIS benchmark alignment, and verification for production systems.
Feb 13, 20268 min read
Threat Intelligence
LockBit Takedown: What Came After
Operation Cronos disrupted LockBit's infrastructure but not the underlying affiliate economy. Here is what actually changed and what defenders should take from it into 2026.
Feb 13, 20267 min read
Product
Safeguard Gold Expands to 6,000+ Artifacts
The Gold Registry crossed 6,000 curated zero-CVE packages and images across ten ecosystems in February 2026 — and is now at 500K+. Here is what was in the original milestone, how it is built, and how to use it.
Feb 13, 20267 min read
Best Practices
Remix Framework Security Deep Dive
Remix's server-first architecture and loader/action primitives make for a distinctive security model. The framework encourages good patterns, but the places where it leaves choices to the developer are where I find the interesting bugs.
Feb 13, 20267 min read
Security Strategy
Building vs Buying Security Tools: Making the Right Call
Every security team faces the build-vs-buy decision. Here is a framework for deciding when to build custom tools and when to buy off the shelf.
Feb 13, 20264 min read
Best Practices
What is a Honeypot
A honeypot is a decoy system or credential built to lure attackers so defenders can detect, delay, and study intrusions before real assets are touched.
Feb 13, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.