AI Security
Griffin AI vs Mythos: Architecture Deep Dive
An architectural comparison of Griffin AI's engine-grounded reasoning stack against the pure-LLM pattern that Mythos-class products rely on.
Feb 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Griffin AI vs Claude Desktop MCP for Security
Claude Desktop's MCP support makes it a capable security tool. Griffin AI builds on that foundation rather than competing with it.
Feb 18, 20262 min read
AI Security
Leakage Testing Methods For Security Benchmarks
A benchmark that the model has seen in training is a benchmark of memorisation. Specific leakage-testing methods separate generalisation from recall.
Feb 18, 20262 min read
Application Security
IAST vs RASP: A Decision Tree for 2026
When to deploy IAST, when to deploy RASP, and when to skip both. A pragmatic decision tree based on application architecture, threat model, and operational maturity.
Feb 18, 20266 min read
Industry Analysis
NIST NVD Slowdown: What the Vulnerability Enrichment Backlog Means for Security Teams
NIST's National Vulnerability Database nearly stopped enriching CVEs in early 2024, creating a growing backlog that left security teams without the severity scores and metadata they depend on.
Feb 18, 20266 min read
AI Security
How to Run a Rocky Linux Container Scan Correctly
A Rocky Linux container scan only produces accurate results when your scanner reads Rocky's own advisory feed instead of guessing from RHEL or CentOS data.
Feb 18, 20265 min read
AI Security
SaaS Container Security: Protecting Multi-Tenant Workloads
SaaS container security is the set of controls that keep containerized, multi-tenant applications isolated, patched, and hardened from build through runtime. Here is the practical playbook.
Feb 18, 20266 min read
Incident Analysis
Heroku OAuth Token Leak Postmortem and Lessons
A retrospective on the Heroku OAuth token incident, what the public timeline revealed about supply chain trust assumptions, and the durable lessons for platform teams.
Feb 18, 20265 min read
AppSec
Application Security Consulting: What to Actually Expect
Application security consulting services range from a two-week penetration test to a multi-year embedded program, and knowing which one you're buying changes what you should expect to get out of it.
Feb 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.