What Safeguard posts on LinkedIn, X, Instagram, Facebook, TikTok, YouTube and Reddit, newest first. Each item links to the original post. Links only. https://safeguard.sh/social en-us Mon, 02 Nov 2026 12:00:14 GMT hi@safeguard.sh (Safeguard Team) hi@safeguard.sh (Safeguard Team) 60 https://safeguard.sh/icons/icon-192.png https://safeguard.sh/social Software used to be WYSIWYG: what you see is what you get. With coding agents building every app to order, it is WYGIWYN: what you get is what you need. And no two builds share a supply chain. Here is what security has to do about it: https://na2.hubs.ly/H08Lt-b0 Related post: https://safeguard.sh/resources/blog/from-wysiwyg-to-wygiwyn-what-you-get-is-what-you-need https://www.facebook.com/122095740945423737/posts/122126059803423737 https://www.facebook.com/122095740945423737/posts/122126059803423737 Mon, 02 Nov 2026 12:00:14 GMT Facebook For thirty years software was WYSIWYG: what you see is what you get. Millions of teams ran the same release of the same package, so one advisory protected everyone at once. Coding agents break that. They pick the packages, the model, the skills and the connectors for each task,… Related post: https://safeguard.sh/resources/blog/from-wysiwyg-to-wygiwyn-what-you-get-is-what-you-need https://www.linkedin.com/feed/update/urn:li:share:7522990933299187712 https://www.linkedin.com/feed/update/urn:li:share:7522990933299187712 Mon, 02 Nov 2026 12:00:09 GMT LinkedIn WYSIWYG is over. Agents now pick your packages, models and skills per task, so no two builds share a supply chain. Our new post covers the eight controls that follow each build. Link in bio: safeguard.sh/resources/blog/from-wysiwyg-to-wygiwyn-what-you-get-is-what-you-need https://www.instagram.com/p/DfPQa-5AT7W/ https://www.instagram.com/p/DfPQa-5AT7W/ Mon, 02 Nov 2026 12:00:06 GMT Instagram WYSIWYG gave security sameness: one advisory, one patch, everyone covered. Agents build every app to order now (WYGIWYN), so the build is the unit to secure. Eight controls that hold up. https://t.co/eNcCLLAYEl https://t.co/yWvX1SFOfo Related post: https://safeguard.sh/resources/blog/from-wysiwyg-to-wygiwyn-what-you-get-is-what-you-need https://twitter.com/safeguard_sh/status/2117225209707278624 https://twitter.com/safeguard_sh/status/2117225209707278624 Mon, 02 Nov 2026 12:00:00 GMT X Whether your team standardised on Anthropic's Claude or OpenAI's ChatGPT, where your code and prompts go should be your decision. In Safeguard you pick the model: Claude or GPT models through your own vendor account, Safeguard's own models, or one you host behind an OpenAI-compa… https://www.instagram.com/reel/DfPJj9xDGVo/ https://www.instagram.com/reel/DfPJj9xDGVo/ Mon, 02 Nov 2026 11:02:22 GMT Instagram Most security tools stall when the twentieth team needs access. The fix is order: pilot one team, put SSO, multi-factor and roles in first, run policies in Warn or Notify, then switch the gates that matter to Block. SAML or OIDC sign-in, SCIM deprovisioning, scoped roles, an org… Related post: https://safeguard.sh/resources/blog/roll-out-safeguard-across-an-enterprise-sso-scim-roles-org-hierarchy-and-audit-log https://www.instagram.com/p/DfPJjlQgbU6/ https://www.instagram.com/p/DfPJjlQgbU6/ Mon, 02 Nov 2026 11:02:06 GMT Instagram Whether your team standardised on Anthropic's Claude or OpenAI's ChatGPT, where your code and prompts go should be your decision. In Safeguard you make both halves of that call. The model. Claude or GPT models through your own vendor account, Safeguard's own models, a self-hoste… Related post: https://safeguard.sh/resources/blog/where-your-code-and-data-go-with-safeguard-saas-regions-private-vpc-on-prem-and-air-gapped https://www.linkedin.com/feed/update/urn:li:ugcPost:7522976312899092480 https://www.linkedin.com/feed/update/urn:li:ugcPost:7522976312899092480 Mon, 02 Nov 2026 11:02:03 GMT LinkedIn Whether your team standardised on Anthropic's Claude or OpenAI's ChatGPT, where your code and prompts go should be your decision. With Safeguard you pick the model (Claude or GPT models through your own vendor account, Safeguard's own models, or one you host behind an OpenAI-com… Related post: https://safeguard.sh/resources/blog/where-your-code-and-data-go-with-safeguard-saas-regions-private-vpc-on-prem-and-air-gapped https://www.facebook.com/reel/1880703323348414/ https://www.facebook.com/reel/1880703323348414/ Mon, 02 Nov 2026 11:00:50 GMT Facebook Whether your team standardised on Anthropic's Claude or OpenAI's ChatGPT, where your code and prompts go should be your decision. In Safeguard you pick the model (Claude or GPT models through your own vendor account, Safeguard's own models, or one you host behind an OpenAI-compa… Related post: https://safeguard.sh/resources/blog/where-your-code-and-data-go-with-safeguard-saas-regions-private-vpc-on-prem-and-air-gapped https://www.youtube.com/watch?v=B5of9BTXH7s https://www.youtube.com/watch?v=B5of9BTXH7s Mon, 02 Nov 2026 11:00:29 GMT YouTube Most security tools stall when the twentieth team needs access. Our rollout order: pilot one team, put SSO, multi-factor and roles in first, run policies in Warn or Notify, then switch the gates that matter to Block. SAML or OIDC sign-in, SCIM deprovisioning, scoped roles, an or… Related post: https://safeguard.sh/resources/blog/roll-out-safeguard-across-an-enterprise-sso-scim-roles-org-hierarchy-and-audit-log https://www.facebook.com/122095740945423737/posts/122126052777423737 https://www.facebook.com/122095740945423737/posts/122126052777423737 Mon, 02 Nov 2026 11:00:14 GMT Facebook Most security tools stall after the first enthusiastic team, when the twentieth team needs access. The blockers are about identity and control, not scanning. A rollout order that works: pilot one team, put SSO, multi-factor and roles in first, run policies in Warn or Notify, the… Related post: https://safeguard.sh/resources/blog/roll-out-safeguard-across-an-enterprise-sso-scim-roles-org-hierarchy-and-audit-log https://www.linkedin.com/feed/update/urn:li:share:7522975833456832513 https://www.linkedin.com/feed/update/urn:li:share:7522975833456832513 Mon, 02 Nov 2026 11:00:09 GMT LinkedIn Standardised on Anthropic's Claude or OpenAI's ChatGPT? Where your code and prompts go is still your call. Bring your model. Pick where Safeguard runs, SaaS to air-gapped. Air-gapped means Safeguard's or open-weight models. Your model, your call (2/3) https://t.co/w0G95ogBnr htt… Related post: https://safeguard.sh/resources/blog/where-your-code-and-data-go-with-safeguard-saas-regions-private-vpc-on-prem-and-air-gapped https://twitter.com/safeguard_sh/status/2117210140659372040 https://twitter.com/safeguard_sh/status/2117210140659372040 Mon, 02 Nov 2026 11:00:08 GMT X Security tools stall when the 20th team needs access. Rollout order: pilot one team, SSO + MFA + roles first, policies in Warn, then Block the gates that matter. https://t.co/5bmgr3kV8j https://t.co/HhdHlNvmYt Related post: https://safeguard.sh/resources/blog/roll-out-safeguard-across-an-enterprise-sso-scim-roles-org-hierarchy-and-audit-log https://twitter.com/safeguard_sh/status/2117210110422643083 https://twitter.com/safeguard_sh/status/2117210110422643083 Mon, 02 Nov 2026 11:00:00 GMT X On Claude or ChatGPT? Where your code goes is still your call. Bring your model, pick where Safeguard runs: US, EU (Frankfurt), Gov, VPC, on-prem, air-gapped. Closed models never run on-prem or air-gapped, so air-gapped = Safeguard's or open-weight models. Your model, your call… https://www.tiktok.com/@safeguard_sh/video/7703527255472966944 https://www.tiktok.com/@safeguard_sh/video/7703527255472966944 Mon, 02 Nov 2026 11:00:00 GMT TikTok A skill is a folder, not a prompt. The description loads first, the scripts run later, and nobody reads them in between. Our new guide shows how to write and test a http://SKILL.md, then the eight risks and a control for each. Link in bio: safeguard.sh/resources/blog/how-to-writ… https://www.instagram.com/p/DfPCsHQAd8M/ https://www.instagram.com/p/DfPCsHQAd8M/ Mon, 02 Nov 2026 10:02:06 GMT Instagram Writing an Agent Skill takes ten minutes. Writing one that triggers on the right requests and does not hand an attacker your shell takes real engineering. A skill is a folder with a https://lnkd.in/gZ44vq46, loaded in stages: the description first, the body when a task matches,… https://www.linkedin.com/feed/update/urn:li:share:7522960725334482944 https://www.linkedin.com/feed/update/urn:li:share:7522960725334482944 Mon, 02 Nov 2026 10:00:06 GMT LinkedIn Agent Skills are easy to write and easy to under review. Here is how to write a https://na2.hubs.ly/H08LsLS0 that triggers correctly, and the eight risks to check before you install or share one: https://na2.hubs.ly/H08LsLV0 https://www.facebook.com/122095740945423737/posts/122126046465423737 https://www.facebook.com/122095740945423737/posts/122126046465423737 Mon, 02 Nov 2026 10:00:05 GMT Facebook A skill's description is its trigger, and its scripts are what runs. How to write a https://t.co/1a4Pb2NCYj that loads when it should, plus 8 risks with a control for each, from trojaned scripts to silent updates. https://t.co/vJ23xsHpAa https://t.co/5vM2QFFDXZ https://twitter.com/safeguard_sh/status/2117195012324942263 https://twitter.com/safeguard_sh/status/2117195012324942263 Mon, 02 Nov 2026 10:00:01 GMT X Every MCP server you connect is code running with your credentials. Our new guide covers the OWASP MCP Top 10, the lethal trifecta, and a fix for each of the ten risks, from tool poisoning to shadow servers. Link in bio: safeguard.sh/resources/blog/what-is-an-mcp-server-and-how-… https://www.instagram.com/p/DfO70nCAYOq/ https://www.instagram.com/p/DfO70nCAYOq/ Mon, 02 Nov 2026 09:02:05 GMT Instagram Which MCP servers are your AI assistants connected to, and who approved them? The OWASP MCP Top 10 explained in plain terms, with a fix for every risk, from leaked tokens to shadow servers: https://na2.hubs.ly/H08LsLc0 Related post: https://safeguard.sh/resources/blog/what-is-an-mcp-server-and-how-to-secure-it-owasp-mcp-top-10-explained https://www.facebook.com/122095740945423737/posts/122126034075423737 https://www.facebook.com/122095740945423737/posts/122126034075423737 Mon, 02 Nov 2026 09:00:18 GMT Facebook An MCP server is code you run with your credentials. Most teams approve one and never look again. On 25 September 2025 Postmark said someone had impersonated it with an npm package called postmark-mcp. After 15 clean versions, 1.0.16 quietly blind copied every email the tool sen… Related post: https://safeguard.sh/resources/blog/what-is-an-mcp-server-and-how-to-secure-it-owasp-mcp-top-10-explained https://www.linkedin.com/feed/update/urn:li:share:7522945634266488832 https://www.linkedin.com/feed/update/urn:li:share:7522945634266488832 Mon, 02 Nov 2026 09:00:09 GMT LinkedIn An MCP server is a program with your credentials. The lethal trifecta: private data + untrusted content + a way out. Then all 10 OWASP MCP risks, each with a fix. Includes the postmark-mcp backdoor that BCC'd every email. https://t.co/xcKcG1OElw https://t.co/i5qS5vii0U Related post: https://safeguard.sh/resources/blog/what-is-an-mcp-server-and-how-to-secure-it-owasp-mcp-top-10-explained https://twitter.com/safeguard_sh/status/2117179910779482296 https://twitter.com/safeguard_sh/status/2117179910779482296 Mon, 02 Nov 2026 09:00:00 GMT X Fixed an XXE finding and it came back? A new parser with default settings probably shipped in a new place. Parser settings for Java, .NET, Python, PHP, Go, http://Node.js and Ruby, plus the CI checks that stop an unsafe parser from merging: https://na2.hubs.ly/H08Lrsc0 Related post: https://safeguard.sh/resources/blog/stop-xxe-before-merge-parser-settings-ci-checks-and-upgrades https://www.facebook.com/122095740945423737/posts/122126030979423737 https://www.facebook.com/122095740945423737/posts/122126030979423737 Mon, 02 Nov 2026 08:30:19 GMT Facebook You fixed an XXE finding by hand. Months later it is back. XXE is mostly a configuration problem, not a library version problem. A SAML handler, an SVG preview or a partner feed reader arrives with a one line parse call, and nothing tells its author about the setting the other p… Related post: https://safeguard.sh/resources/blog/stop-xxe-before-merge-parser-settings-ci-checks-and-upgrades https://www.linkedin.com/feed/update/urn:li:share:7522938086641680385 https://www.linkedin.com/feed/update/urn:li:share:7522938086641680385 Mon, 02 Nov 2026 08:30:09 GMT LinkedIn XXE is mostly a settings problem. Every new SAML handler, SVG preview or SOAP client is a chance to ship a parser with defaults that allow DTDs. Our new post gives you the settings for 7 languages, three CI checks including a DOCTYPE negative test, and the library versions that… https://www.instagram.com/p/DfO4Y-8Aazy/ https://www.instagram.com/p/DfO4Y-8Aazy/ Mon, 02 Nov 2026 08:30:06 GMT Instagram XXE keeps coming back because it is mostly parser configuration, not library versions. Fix it where it lands: a CI rule for parser setup plus a negative test with a DOCTYPE fixture. Settings for 7 languages inside. https://t.co/lNw5LhbN0A https://t.co/ZCWasGwF5F Related post: https://safeguard.sh/resources/blog/stop-xxe-before-merge-parser-settings-ci-checks-and-upgrades https://twitter.com/safeguard_sh/status/2117172362886168634 https://twitter.com/safeguard_sh/status/2117172362886168634 Mon, 02 Nov 2026 08:30:01 GMT X A new blocking rule that breaks every build tends to get switched off. Roll it out in two steps instead. In Safeguard, each policy has one action: Block, Warn or Notify. Warn: the gate still passes, with a warning that names the policy. Notify: the gate passes and your channels… Related post: https://safeguard.sh/resources/blog/policies-vs-gates-vs-guardrails-in-safeguard-what-each-does-and-where-it-runs https://www.linkedin.com/feed/update/urn:li:ugcPost:7522931018757234688 https://www.linkedin.com/feed/update/urn:li:ugcPost:7522931018757234688 Mon, 02 Nov 2026 08:02:04 GMT LinkedIn A new blocking rule that breaks every build gets switched off. Start it as a warn: the gate passes and names the policy. Fix what it finds, flip the same rule to Block, and let CI fail the build on a failed gate. Link in bio: http://safeguard.sh/resources/blog #devsecops #appsec… https://www.instagram.com/reel/DfO09xECaLV/ https://www.instagram.com/reel/DfO09xECaLV/ Mon, 02 Nov 2026 08:02:04 GMT Instagram A new blocking rule that breaks every build tends to get switched off. In Safeguard a policy's action is Block, Warn or Notify. Start the rule as a warn (the gate passes and names the policy), fix what it finds, then flip the same rule to Block. In CI, safeguard ci scan --wait -… Related post: https://safeguard.sh/resources/blog/policies-vs-gates-vs-guardrails-in-safeguard-what-each-does-and-where-it-runs https://www.facebook.com/reel/2147250382566160/ https://www.facebook.com/reel/2147250382566160/ Mon, 02 Nov 2026 08:00:29 GMT Facebook A new blocking rule that breaks every build tends to get switched off. In Safeguard each policy has one action: Block, Warn or Notify. A warn lets the gate pass and names the policy. Fix what it finds, flip the same rule to Block, and let one CI step fail the build when the gate… Related post: https://safeguard.sh/resources/blog/policies-vs-gates-vs-guardrails-in-safeguard-what-each-does-and-where-it-runs https://www.youtube.com/watch?v=2KB429KliOU https://www.youtube.com/watch?v=2KB429KliOU Mon, 02 Nov 2026 08:00:23 GMT YouTube New security rule? Ship it as a warn first. In Safeguard a policy's action is Block, Warn or Notify. Warn passes the gate and names the policy. Fix what it finds, flip to Block, and let CI fail the build on a failed gate. https://t.co/ROgzSuUs71 https://t.co/ypW6fFM5D4 Related post: https://safeguard.sh/resources/blog/policies-vs-gates-vs-guardrails-in-safeguard-what-each-does-and-where-it-runs https://twitter.com/safeguard_sh/status/2117164846311731326 https://twitter.com/safeguard_sh/status/2117164846311731326 Mon, 02 Nov 2026 08:00:09 GMT X Start a new security rule as a warn, fix what it finds, then flip it to block. The gate decides what ships. Link in bio: https://na2.hubs.ly/H08LgPd0 #devsecops #appsec #cicd https://www.tiktok.com/@safeguard_sh/video/7703480879758314784 https://www.tiktok.com/@safeguard_sh/video/7703480879758314784 Mon, 02 Nov 2026 08:00:01 GMT TikTok "We will fix it later" only holds up if someone decided it, wrote down why, and set an end date. Our new post covers the four mitigation types in Safeguard, expiry presets of 30, 90, 180 and 365 days, reminders before it lapses, and the history that serves as your audit trail. E… https://www.instagram.com/p/DfOxhc1gX-a/ https://www.instagram.com/p/DfOxhc1gX-a/ Mon, 02 Nov 2026 07:32:05 GMT Instagram "We will fix it later" is fine. "We will fix it later" with no owner and no end date is what fails an audit. How to record a risk acceptance in Safeguard with an approver, evidence and an expiry, and what changes when it runs out: https://na2.hubs.ly/H08LrsQ0 Related post: https://safeguard.sh/resources/blog/document-a-vulnerability-mitigation-in-safeguard-risk-acceptance-expiry-review-and-audit-trail https://www.facebook.com/122095740945423737/posts/122126025561423737 https://www.facebook.com/122095740945423737/posts/122126025561423737 Mon, 02 Nov 2026 07:30:20 GMT Facebook Audits rarely fail on the open finding. They fail on the open finding with no record. The record has to answer four questions: who decided, on what basis, when does it end, and has anything changed since. Our new post walks through Mitigations in Safeguard. Four types, each maki… Related post: https://safeguard.sh/resources/blog/document-a-vulnerability-mitigation-in-safeguard-risk-acceptance-expiry-review-and-audit-trail https://www.linkedin.com/feed/update/urn:li:share:7522923023495045120 https://www.linkedin.com/feed/update/urn:li:share:7522923023495045120 Mon, 02 Nov 2026 07:30:18 GMT LinkedIn A risk acceptance with no expiry date is a finding nobody looks at again. In Safeguard an expired mitigation counts again in gates, with reminders at 14 days, 7 days and on the day. https://t.co/oA7rDjL8tL https://t.co/VBT2TYr2OP Related post: https://safeguard.sh/resources/blog/document-a-vulnerability-mitigation-in-safeguard-risk-acceptance-expiry-review-and-audit-trail https://twitter.com/safeguard_sh/status/2117157261042962658 https://twitter.com/safeguard_sh/status/2117157261042962658 Mon, 02 Nov 2026 07:30:00 GMT X Anthropic filed an S-1 on 26 October 2026. If your team depends on Claude, use it to sharpen your AI vendor questionnaire. Swipe for the questions by group: data retention, supply chain, agents and connectors, availability, incidents. All 14 are in the post. Not investment advic… Related post: https://safeguard.sh/resources/blog/anthropic-s-1-ai-vendor-risk-security-teams https://www.instagram.com/p/DfOnSZPgSm9/ https://www.instagram.com/p/DfOnSZPgSm9/ Mon, 02 Nov 2026 06:02:58 GMT Instagram Anthropic filed an S-1 on 26 October 2026. If your team depends on Claude, it is a handy source of questions for your AI vendor review: what is retained and where, what an agent can do without approval, what notice you get before a model is withdrawn, and how fast you hear about… Related post: https://safeguard.sh/resources/blog/anthropic-s-1-ai-vendor-risk-security-teams https://www.facebook.com/122095740945423737/posts/122126017413423737 https://www.facebook.com/122095740945423737/posts/122126017413423737 Mon, 02 Nov 2026 06:00:23 GMT Facebook Anthropic filed a Form S-1 on 26 October 2026. If your team depends on Claude, the filing is also a source of vendor review questions. It is a preliminary prospectus, so treat it as a dated snapshot. What it gives a security team is a plain account of how a frontier model provid… Related post: https://safeguard.sh/resources/blog/anthropic-s-1-ai-vendor-risk-security-teams https://www.linkedin.com/feed/update/urn:li:ugcPost:7522900351537172480 https://www.linkedin.com/feed/update/urn:li:ugcPost:7522900351537172480 Mon, 02 Nov 2026 06:00:12 GMT LinkedIn Anthropic's S-1 doubles as an AI vendor review checklist. Ask any model provider: what is retained and where, what can an agent do without approval, what notice before a model is withdrawn, when will you tell us about an incident? 14 questions: https://t.co/7ptMolzrh6 https://t.… Related post: https://safeguard.sh/resources/blog/anthropic-s-1-ai-vendor-risk-security-teams https://twitter.com/safeguard_sh/status/2117134626963775995 https://twitter.com/safeguard_sh/status/2117134626963775995 Mon, 02 Nov 2026 06:00:04 GMT X Safeguard Desktop 3.3.0 is out. What is in it, from the release notes: It runs on Electron 45, so it picks up Chromium and Node security updates. Your saved sign-in is now encrypted with your computer's own key (the macOS Keychain, Windows data protection, or the Secret Service… https://www.linkedin.com/feed/update/urn:li:ugcPost:7522870634754961409 https://www.linkedin.com/feed/update/urn:li:ugcPost:7522870634754961409 Mon, 02 Nov 2026 04:02:07 GMT LinkedIn Safeguard Desktop 3.3.0 is out. Electron 45, an encrypted saved sign-in, a sandboxed Linux AppImage. Mac builds are signed and notarized, and SHA-256 checksums are listed for every installer. Download: http://safeguard.sh/download (link in bio) #appsec #devsecops #supplychainsec… https://www.instagram.com/reel/DfOZib1CgBH/ https://www.instagram.com/reel/DfOZib1CgBH/ Mon, 02 Nov 2026 04:02:03 GMT Instagram Safeguard Desktop 3.3.0 is out. It runs on Electron 45, encrypts your saved sign-in with your computer's own key, and the Linux AppImage now runs inside Chromium's sandbox where your system allows it. The Mac builds are signed and notarized. Windows and Linux installers list SHA… https://www.youtube.com/watch?v=ht1v9YkgAVc https://www.youtube.com/watch?v=ht1v9YkgAVc Mon, 02 Nov 2026 04:00:38 GMT YouTube Safeguard Desktop 3.3.0 is out. It runs on Electron 45, encrypts your saved sign-in with your computer's own key, and the Linux AppImage now runs inside Chromium's sandbox where your system allows it. Mac builds are signed and notarized; Windows and Linux installers list SHA-256… https://www.facebook.com/reel/2624146068006910/ https://www.facebook.com/reel/2624146068006910/ Mon, 02 Nov 2026 04:00:15 GMT Facebook Safeguard Desktop 3.3.0 is out. Electron 45, saved sign-in encrypted with your computer's own key, a sandboxed Linux AppImage. Mac builds signed and notarized, SHA-256 checksums listed. https://t.co/6XVLzIEMJC https://t.co/pTiMCCu7he https://twitter.com/safeguard_sh/status/2117104446194991247 https://twitter.com/safeguard_sh/status/2117104446194991247 Mon, 02 Nov 2026 04:00:08 GMT X Safeguard Desktop 3.3.0 is out: Electron 45, encrypted saved sign-in, sandboxed Linux AppImage, signed and notarized Mac builds. Download at https://na2.hubs.ly/H08LgJY0 (link in bio) #appsec #devsecops https://www.tiktok.com/@safeguard_sh/video/7703418906756599073 https://www.tiktok.com/@safeguard_sh/video/7703418906756599073 Mon, 02 Nov 2026 04:00:00 GMT TikTok How does a small team fix many repositories at once? Select, run remediation, review one pull request per repository. Only the exceptions need a person. Watch the Short on YouTube, link in bio: http://youtube.com/shorts/ORIvrX0x1LI #AppSec #DevSecOps #SupplyChainSecurity https://www.instagram.com/p/DfNDqRcAZAd/ https://www.instagram.com/p/DfNDqRcAZAd/ Sun, 01 Nov 2026 15:30:24 GMT Instagram A licence change is a supply chain event. Redis 7.2.x and earlier: BSD 3-Clause. Redis 7.4.x to 7.8.x: RSALv2 or SSPLv1. Redis 8 and later: RSALv2, SSPLv1 or AGPLv3. Valkey continues from Redis 7.2.4 under BSD 3-Clause. Check what your SBOM says about the Redis-compatible server… Related post: https://safeguard.sh/resources/blog/redis-and-valkey-release-history-from-2009-to-redis-8-and-valkey-8-licence-changes-the-fork-and-security-defaults https://www.instagram.com/p/DfNDrh8gROS/ https://www.instagram.com/p/DfNDrh8gROS/ Sun, 01 Nov 2026 15:30:16 GMT Instagram A licence change is a supply chain event. Redis 7.2.x and earlier are BSD 3-Clause. Redis 7.4.x to 7.8.x are RSALv2 or SSPLv1. Redis 8 and later are tri-licensed: RSALv2, SSPLv1 or AGPLv3. Valkey continues from Redis 7.2.4 under BSD 3-Clause. Check what your SBOM says about the… Related post: https://safeguard.sh/resources/blog/redis-and-valkey-release-history-from-2009-to-redis-8-and-valkey-8-licence-changes-the-fork-and-security-defaults https://www.facebook.com/122095740945423737/posts/122125946079423737 https://www.facebook.com/122095740945423737/posts/122125946079423737 Sun, 01 Nov 2026 15:30:13 GMT Facebook A licence change is a supply chain event. Redis 7.2.x and earlier are BSD 3-Clause. Redis 7.4.x to 7.8.x are RSALv2 or SSPLv1. Redis 8 and later are tri-licensed: RSALv2, SSPLv1 or AGPLv3. Redis's own licence page says SSPLv1 is not an open source licence and AGPLv3 is OSI appro… Related post: https://safeguard.sh/resources/blog/redis-and-valkey-release-history-from-2009-to-redis-8-and-valkey-8-licence-changes-the-fork-and-security-defaults https://www.linkedin.com/feed/update/urn:li:share:7522681393521340416 https://www.linkedin.com/feed/update/urn:li:share:7522681393521340416 Sun, 01 Nov 2026 15:30:09 GMT LinkedIn