Industry Analysis
The State of Cloud Native Application Security survey
New 2026 survey data reveals a widening gap between vulnerability alert volume and remediation capacity — and what security teams say actually helps.
Apr 25, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSoftware Supply Chain Security
Container image signing and verification
Scanning tells you what's inside a container image; signing proves where it came from. Here's how signature verification closes the gap that CVE scanners like Trivy leave open.
Apr 25, 20268 min read
Breach Analysis
Dior Customer Data Breach 2025: Luxury Fashion's Cybersecurity Problem
Christian Dior disclosed a breach exposing customer personal data in May 2025. The luxury sector's data protection challenges are now front and center.
Apr 25, 20266 min read
Containers
Docker Privileged Mode: What --privileged Really Grants and Safer Options
Docker Compose privileged mode hands a container nearly all host capabilities. Here is what --privileged actually turns on, and the scoped alternatives that do the same job safely.
Apr 25, 20266 min read
Software Supply Chain Security
PulseMeter report: software supply chain risk perceptions
Safeguard's latest PulseMeter survey finds 71% of teams hit a supply chain incident this year, but only 34% feel confident they'd catch one in time.
Apr 25, 20267 min read
Security
Local Storage Security: What to Store and What Never To
Local storage security comes down to one rule most apps break: the browser's localStorage is readable by any JavaScript on the page, so it is no place for secrets.
Apr 25, 20265 min read
Software Supply Chain Security
NPM package vulnerabilities: risks and detection
NPM's open, high-velocity ecosystem makes it a top target for supply chain attacks. Here's how vulnerabilities slip past scanners like Trivy undetected.
Apr 25, 20266 min read
DevSecOps
MagicMock in Python: Safe Testing and the Traps to Avoid
MagicMock in Python makes tests easy to write and easy to make lie. Here is how it differs from Mock and how to keep mocks from hiding real security bugs.
Apr 25, 20265 min read
AI Security
The State of Agentic AI Adoption report
New survey data on the state of agentic AI adoption shows enterprises racing to deploy autonomous agents faster than security teams can govern them.
Apr 25, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.