AI Security
What a Container Security Platform Should Actually Do
A container security platform has to cover images, registries, and running workloads. Here is what real coverage looks like and how to evaluate one.
Apr 16, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
What is Application Security (AppSec)
Application security spans SAST, SCA, secrets and container scanning. See how AppSec differs from DevSecOps, why it's now board-level, and how Safeguard prioritizes fixes.
Apr 16, 20267 min read
Security
CVE-2019-10768: The AngularJS Prototype Pollution Flaw Explained
CVE-2019-10768 is a prototype pollution vulnerability in AngularJS before 1.7.9, where the merge() function can be tricked into modifying Object.prototype. Here is what it does, who it affects, and how to remediate.
Apr 16, 20265 min read
Security
Android Application Security Solutions That Reduce Real Risk
Android application security solutions span secure storage, network hardening, code protection, and dependency scanning. Here is what each layer covers and how iOS compares.
Apr 16, 20266 min read
Supply Chain
Open Source Sustainability Is an Attack Surface Problem
Unmaintained, underfunded open source is not just a reliability risk — it is how attackers get in. The xz Utils backdoor proved that maintainer burnout is a security vulnerability with a CVE number.
Apr 16, 20266 min read
Vulnerability Analysis
Windows NTLM Hash Disclosure CVE-2025-24054: The Protocol That Won't Die
CVE-2025-24054 leaks NTLM hashes through .library-ms files with minimal user interaction. Microsoft patched it in April 2025, but exploitation started almost immediately.
Apr 16, 20266 min read
Application Security
Static Application Security Testing (SAST)
SAST scans source code for exploitable flaws before deployment. Learn how it works, how it differs from DAST/SCA, and where it falls short.
Apr 16, 20266 min read
Container Security
Image Scanning
How container image scanning works, where tools like Aqua Security's Trivy fall short on noise and reachability, and what modern scanning workflows require.
Apr 16, 20268 min read
Security
Testing and Debugging for Security: A Practical Guide
Testing and debugging are where most security bugs are actually caught or missed. Here is how to fold security into both without slowing your team down.
Apr 16, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.