Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
How Bridgecrew (Prisma Cloud Code Security) and tfsec compare on policy coverage, custom rule extensibility, drift detection, and the operational fit for IaC programs.
Bridgecrew's Checkov is still shipping weekly patches in 2026. We ran 3.2.527 against a 38,000-line Terraform monorepo and graded coverage, noise, and CI cost.
tfsec has been folded into Trivy for over a year and Aqua has stopped feature work on tfsec. We migrated three platforms in 2026 and documented what actually breaks.
A security-focused review of the Google Terraform providers: provenance, authentication paths, state handling, and the misconfigurations that consistently produce incidents across the Google and Google-Beta provider ecosystem.
A practical guide to integrating security scanning into your Terraform workflow without destroying developer productivity.
Weekly insights on software supply chain security, delivered to your inbox.