Tag
SSVC
Safeguard articles tagged "SSVC" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Compliance
CISA BOD 26-04 Explained: Three-Day KEV Deadlines, Forensic Triage, and the Table Behind Them
CISA's BOD 26-04 replaced the familiar 21-day KEV deadline with a 16-row table: 3, 14 or 60 days, plus forensic triage in the worst cases. What it requires, the 7 December 2026 deadline, and a script that looks up the deadline for any CVE.
Oct 18, 202612 min read
Vulnerability Management
How to Read a CVE Record in Code: CVE JSON 5, Affected Versions and CISA Vulnrichment
A CVE record in the JSON 5 format can say precisely which versions are affected, but it can also say it in free text, say nothing, or contradict itself. How to read one correctly, with five real records from this week and data from 1,197 new records.
Oct 18, 202611 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.