Threat Intelligence
Threat Hunting in the Software Supply Chain
Proactive threat hunting techniques adapted for software supply chain security—because waiting for alerts isn't enough when adversaries hide in your dependencies.
Feb 2, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
What is Abstract Syntax Tree (AST) Analysis
AST analysis parses code into a tree to catch what regex scanning misses — here's how it works, its limits, and how reachability fixes the gap.
Feb 2, 20266 min read
Kubernetes Security
Kubernetes Network Policies Deep Dive: From Zero Trust to Microsegmentation
By default, every pod can talk to every other pod. Network policies change that, but most implementations are incomplete. Here is how to build real microsegmentation in Kubernetes.
Feb 2, 20267 min read
Industry Analysis
Ruby deserialization vulnerabilities: Marshal.load, YAML....
A decade of Ruby CVEs — from CVE-2013-0156 to CVE-2022-32224 — shows how Marshal.load and YAML.load turn untrusted input into remote code execution.
Feb 2, 20268 min read
DevSecOps
DevSecOps Toolchain Integration Patterns That Actually Work
Most DevSecOps tool integrations fail because they are bolted on rather than designed in. Here are integration patterns that provide security value without breaking the developer experience.
Feb 2, 20266 min read
Best Practices
Security Champions With a Supply Chain Focus
Designing and running a security champions program specifically for supply chain risks, including recruitment, training, cadences, and measurable impact.
Feb 2, 20266 min read
Application Security
What is Semantic Code Analysis
Semantic code analysis traces how data actually flows through code to find real vulnerabilities — cutting false positives that plague pattern-matching SAST tools.
Feb 2, 20265 min read
Open Source Security
Auditing Ruby dependencies for known CVEs with bundler-audit
A step-by-step bundler-audit tutorial for scanning Ruby gems against known CVEs, patching vulnerable dependencies, and enforcing the check in CI.
Feb 2, 20267 min read
Vulnerability Management
Vulnerability Remediation SLAs: Best Practices for Real Teams
Setting vulnerability remediation deadlines is easy. Actually meeting them is hard. This guide covers practical SLA frameworks that balance security urgency with engineering reality.
Feb 2, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.