Security
Mobile Number Validation in JavaScript: A Security-Aware Guide
Mobile number validation in JavaScript is easy to get wrong with a naive regex. Here is how to validate phone numbers correctly, safely, and without ReDoS.
Apr 1, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedOpen Source Security
What is Open Source Security
Open source powers 70-90% of modern codebases. Learn what open source security means, its real risks, and how reachability analysis cuts through the noise.
Apr 1, 20266 min read
Incident Analysis
Patelco Credit Union RansomHub Attack: 1M Records, $7.25M Settlement
RansomHub maintained access to Patelco Credit Union's network from May 23 to June 29, 2024, ultimately exposing data on over one million members and triggering a $7.25M class settlement.
Apr 1, 20266 min read
Compliance
FedRAMP High: requirements and readiness
What FedRAMP High actually requires: 421 controls, 12-24 month timelines, and how supply chain security vendors like Chainguard and Safeguard measure up.
Apr 1, 20267 min read
Compliance
What Is the Most Restrictive Open Source License?
The AGPL is usually named the most restrictive open source license because its copyleft reaches across the network. Here is what that means and how it compares to permissive licenses.
Apr 1, 20266 min read
Vulnerability Analysis
What is Cross-Site Scripting (XSS)
XSS lets attackers inject malicious JavaScript into trusted pages. Learn how stored, reflected, and DOM-based XSS work, real breaches, and defenses.
Apr 1, 20267 min read
Security
CVE-2020-25638: SQL Injection in Hibernate ORM Explained
CVE-2020-25638 is a SQL injection flaw in hibernate-core that surfaces when SQL comments are enabled and literals are used in JPA Criteria queries. Here is who is affected and how to remediate it.
Apr 1, 20265 min read
Compliance
FedRAMP compliance checklist: steps, requirements, docume...
A concrete FedRAMP compliance checklist: steps, documentation, timelines, and how supply chain evidence like Chainguard images and Safeguard SBOMs fits in.
Apr 1, 20267 min read
Software Supply Chain Security
Video Codec Supply Chain Risks: The Hidden Attack Surface in Media Libraries
Video codecs are some of the most complex code in your dependency tree. Their complexity and privileged execution make them prime supply chain targets.
Apr 1, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.