Best Practices
Renovate Bot Configuration Recipes for 2026
Renovate is the more powerful dependency-update bot, and its config surface is large. Here are the recipes worth knowing and the defaults worth overriding.
Feb 12, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedVulnerabilities
Notable CVEs of 2023: A Practitioner's Roundup
From an OpenSSL IV-truncation flaw to a critical Babel code-execution bug, 2023's CVE crop is a good reminder that severity and blast radius don't always line up.
Feb 12, 20266 min read
AI Security
Cursor IDE Security Model: What Enterprises Need to Know
Cursor's 2026 security model introduces privacy modes, indexing controls, and agent sandboxes. Here is the enterprise-ready view of what works.
Feb 12, 20265 min read
AI Security
Regression Gates: Griffin AI vs Mythos
Every release risks making the model worse. Griffin AI's regression gates block bad builds before they ship. Mythos-class tools rarely describe a gate process at all.
Feb 12, 20267 min read
AI Security
XSS Variants: Griffin AI vs Mythos
Stored, reflected, DOM, mutation, and template-injection XSS each live in a different part of the application and demand a different analysis. Griffin's engine understands template contexts, framework escaping rules, and client-side sinks; Mythos reads HTML and hopes. The difference shows up the moment you leave textbook territory.
Feb 12, 20267 min read
AI Security
Griffin AI vs Reka Multimodal for Security
Reka's multimodal models are interesting for specific security workflows. The question is whether multimodal is the binding constraint, and usually it isn't.
Feb 12, 20262 min read
Application Security
YAML Deserialization Attacks and How to Prevent Them
YAML looks innocent but its deserialization features have led to remote code execution in countless applications. Here is why and how to stay safe.
Feb 12, 20264 min read
AppSec
Application Security Solutions: Platform or Point Tools?
The platform-versus-point-tool decision is really a question about who does the correlation work: your vendor or your engineers. A framework for making the call with real numbers.
Feb 12, 20265 min read
Case Studies
SaaS Vendor's EU CRA Readiness Sprint
An anonymized account of how a mid-sized European SaaS vendor prepared for the EU Cyber Resilience Act using a focused 12-week Safeguard readiness sprint.
Feb 12, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.