Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
The Federal Trade Commission has spent the last several years building a software-security enforcement theory under Section 5. Drizly, SolarWinds, and Henry Schein each contributed pieces of the framework.
CISA launched a voluntary pledge asking software manufacturers to commit to specific security improvements. Over 100 companies signed. Here is what the pledge actually requires and whether it matters.
PCI DSS 4.0 became mandatory on March 31, 2024, overhauling software security, SBOM visibility, and supply chain controls for every entity that touches cardholder data.
SWIFT's Customer Security Controls Framework sets mandatory security baselines for financial institutions. Here's the software supply chain angle.
HIPAA's Security Rule requires safeguards that extend to software dependencies. Here's what health tech developers and vendors need to address.
California's privacy laws impose security obligations on software that handles consumer data. Here's how CCPA and CPRA intersect with supply chain risk.
The GLBA Safeguards Rule now requires specific cybersecurity controls for financial institutions. Here's how it affects software supply chains.
GDPR's security requirements extend deep into software supply chains. Here's where data protection law meets dependency management.
Brazil's data protection law creates obligations for software security and supply chain transparency. Here's what developers and vendors should know.
Weekly insights on software supply chain security, delivered to your inbox.