Vulnerability Analysis
What is Remote Code Execution (RCE)
RCE lets attackers run code on your systems remotely, often without login. Learn how it works, real CVE examples, and how to detect it before exploitation.
Mar 31, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedOpen Source Security
Wolfi: the community Linux 'undistro'
Wolfi calls itself an "undistro," not a distro — and it's the open-source foundation under Chainguard Images. Here's what that actually means, and where the gaps are.
Mar 31, 20267 min read
Best Practices
Best Secret Scanning Tools 2026 Comparison
A senior-engineer view of secret-scanning tools worth running in 2026: what TruffleHog, Gitleaks, GitGuardian, and platform-native scanners actually do well.
Mar 31, 20269 min read
Open Source
@microsoft/fetch-event-source: Robust SSE Streams in the Browser
The fetch event source library fixes everything the native EventSource API refuses to do: POST bodies, auth headers, and retry logic you actually control.
Mar 30, 20267 min read
AppSec
Code Security Review: Manual vs Automated, and Where They Meet
Code security review works best as a combination, not a choice — here's what automated scanning catches, what still needs a human reviewer, and how to structure both.
Mar 30, 20265 min read
Security
Source Code Auditing: How to Find Bugs Before Attackers Do
Source code auditing is the systematic review of code for security flaws. Here is how to run one, where automation fits, and what humans still do better.
Mar 30, 20266 min read
AppSec
What Does SAST Mean? Static Application Security Testing, Explained
A plain-English answer to what SAST means, how static analysis finds vulnerabilities in source code, what it catches, what it misses, and where it fits alongside DAST and SCA.
Mar 30, 20266 min read
Engineering
Go Module Security: sumdb, GOPROXY and Private Modules
How Go's checksum database actually protects you, where GOPROXY ordering bites, and the GOPRIVATE mistakes that leak internal module paths to public infrastructure.
Mar 30, 20267 min read
Incident Analysis
American Water Cyberattack: Largest U.S. Utility Forced Offline
American Water Works discovered unauthorised network access on October 3, 2024, shutting down its MyWater customer portal and billing systems serving 14 million people across 24 states.
Mar 30, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.