AI Security
What is Adversarial Machine Learning
Adversarial machine learning exploits model decision boundaries via evasion, poisoning, extraction, and inference attacks -- here's how it works and how to defend against it.
Mar 2, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedBest Practices
Malicious Package Quarantine Procedures
How to quarantine a malicious package across your registries, caches, and running systems without breaking every developer's workflow.
Mar 2, 20266 min read
Identity Security
SVID (SPIFFE Verifiable Identity Document)
An SVID (SPIFFE Verifiable Identity Document) is a cryptographic identity for software workloads. Learn what an SVID is, its X.509 and JWT formats, and how it works.
Mar 2, 20267 min read
Concepts
What is Red Teaming
Red teaming emulates a real adversary to test not just your defenses but your ability to detect and respond. Here's how it works and how it differs from a pentest.
Mar 2, 20265 min read
Licensing
Software License Types: The Complete Guide
Permissive, copyleft, proprietary, and public domain: how the main software license types differ, what each one obligates you to do, and how to pick one for your project.
Mar 2, 20266 min read
AI Security
What is Insecure Output Handling in LLMs
Insecure output handling lets LLM-generated text execute code, alter queries, or render unsanitized HTML — a real, exploitable OWASP LLM05:2025 risk.
Mar 2, 20267 min read
Identity Security
mTLS (mutual TLS)
What is mTLS? A precise breakdown of mutual TLS authentication, how it differs from standard TLS, why service meshes depend on it, and how to handle certificate rotation.
Mar 2, 20267 min read
Vulnerability Analysis
CVE-2024-55956 Cleo Harmony/VLTrader RCE
Cleo's Harmony, VLTrader, and LexiCom carried an unauthenticated RCE that Clop abused for mass data theft. Here is the technical breakdown and the defender's takeaway.
Mar 2, 20267 min read
Vulnerability Analysis
CVE-2024-21413 Outlook Moniker Link Analysis
CVE-2024-21413 is a critical Outlook Moniker Link RCE that bypasses Protected View via a crafted file URL. Root cause, exploitation, and detection.
Mar 2, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.