AI Security
Griffin AI vs Claude Agent Skills for Security
Anthropic's Claude Agent Skills let you package tools and context for Claude. Here's how that primitive compares to Griffin's security-specific workflow scaffolding.
Feb 10, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Griffin AI vs Mythos: The Security Platform Comparison
A senior engineer's side-by-side look at Griffin AI and Mythos — why engine-grounded reasoning beats pure-LLM security intuition when the audit clock starts.
Feb 10, 20266 min read
Standards
ISO/IEC 42001: AI Management Systems Reach Adoption Critical Mass
ISO/IEC 42001:2023 went from new-standard status to enterprise compliance benchmark in 2025, with major SaaS vendors certifying and the EU AI Act referencing it as a harmonized pathway.
Feb 10, 20267 min read
Regulation
UK Cyber Security and Resilience Bill: What Changed November 2025
The UK government published the draft Cyber Security and Resilience Bill on 12 November 2025, bringing over 900 managed service providers and data centres above 1MW into NIS scope.
Feb 10, 20267 min read
Open Source Security
npm Team Access Model Hardening
Npm's team-based permissions are more expressive than most organizations use. A walkthrough of the access model and the configurations that actually reduce blast radius.
Feb 10, 20267 min read
Supply Chain Attacks
Software Supply Chain Security in 2023: Year in Review
From the MOVEit mass exploitation to AI model risks, 2023 proved that supply chain attacks are accelerating in both sophistication and scale. Here's what we learned.
Feb 10, 20265 min read
AI Security
AI Security Solutions: A Buyer's Guide for 2026
AI security solutions now span two very different categories — securing AI systems and using AI to secure everything else — and buyers who conflate them end up with the wrong tool.
Feb 10, 20265 min read
Best Practices
FAQ: Building an AppSec Program From Scratch
How to stand up an application security program from zero in 2026 — headcount, tooling, first 90 days, metrics, and the traps that waste the first year.
Feb 10, 20267 min read
Supply Chain Attacks
Maven Central Malicious Publishing Trends 2025
Maven Central has historically been the quietest major registry for malware, but 2025 saw a measurable uptick in malicious artifacts and namespace abuse.
Feb 10, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.