AI Security
Safetensors vs pickle: which model format should you load?
Prefer safetensors over pickle when a model offers both. Here is the difference, what each format can and cannot do, and a simple order of preference.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
How do you right size AI agent permissions from usage logs?
Compare what an AI agent is granted with what it actually called over 30 to 90 days, then cut the difference. A step by step method and its limits.
Oct 19, 20263 min read
AI Security
How do you revoke an MCP server from every agent that uses it?
Removing an MCP server from every agent takes more than deleting one config line. A checklist: find users, cut access, rotate secrets, verify.
Oct 19, 20264 min read
AI Security
How do you review large AI-generated changes for security?
DORA links AI adoption to higher delivery instability and says small batches counter it. How to review big AI-generated diffs without rubber-stamping.
Oct 19, 20263 min read
AI Security
What should you ask about the model behind a security AI feature?
Ask which model powers the feature, where it runs, what data it sees, whether customer data trains it, and what happens when the model changes. A buyer's list.
Oct 19, 20263 min read
AI Security
What should you ask a vendor that uses AI under NYDFS guidance?
NYDFS says to consider vendors' AI threats and add contract terms for notice and secure use of nonpublic information. Eight diligence questions to ask.
Oct 19, 20263 min read
AI Security
How do you test a vendor's AI feature for prompt injection safely?
Run a safe prompt injection test on a vendor AI feature using a sandbox repo, harmless planted instructions, and clear pass criteria. Steps and what to record.
Oct 19, 20263 min read
AI Security
Is prompt injection worse when an AI task runs on a schedule?
Yes, in one way: no person is watching. Scheduled tasks read untrusted data on their own. Here is how routine fire text and fetched content are handled.
Oct 19, 20267 min read
AI Security
What permission questions should you ask about agent tools in a demo?
Eight questions that reveal how a security product handles agent tool permissions: scope, identity, approval, revocation and records. Ask them live.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.