AI Security
How to Generate an SBOM From a Container Image
A practical walkthrough of how to generate an SBOM from a container image using Syft, Trivy, and Docker Scout, plus how to keep the output trustworthy.
Mar 18, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Container Network Security: How to Lock Down Pod-to-Pod Traffic
Container network security is about controlling which workloads can talk to each other and blocking the rest by default. Here is how to build that in Kubernetes and beyond.
Mar 18, 20267 min read
AI Security
AI Bill of Materials (ML-BOM) Standards in 2026
A senior engineer's survey of AI-BOM and ML-BOM standards in 2026, from CycloneDX ML components to SPDX 3.0 AI profile, and what to actually ship.
Mar 18, 20267 min read
AI Security
AI Chips Explained: What They Are and How to Secure Them
AI chips are specialized processors built to run matrix math at scale, and the way you provision, share, and supply-chain-source them creates security risk most teams never model.
Mar 18, 20268 min read
AI Security
Cross-Vendor SBOM Normalization: Griffin AI vs Mythos
Your SBOMs come from a dozen vendors, three scanners, and two CI systems. Normalising them into one queryable graph is where SBOM programs actually succeed or fail.
Mar 17, 20264 min read
AI Security
Proof-Of-Concept Payloads From Discovered Paths
A taint path is not an exploit. Here is how a zero-day pipeline turns a reachable flow into a defensible proof-of-concept payload without inventing a vulnerability.
Mar 16, 20267 min read
AI Security
Griffin AI vs Windsurf Cascade for Security Review
Windsurf's Cascade agent is among the more capable in-editor agents. For security review specifically, it's a complement to Griffin AI, not a replacement.
Mar 16, 20262 min read
AI Security
Prompt Injection Defences: Griffin AI vs Mythos
Prompt injection is the defining AI security problem of this generation. The defences are structural, not cosmetic — and the architectural choices show.
Mar 16, 20264 min read
AI Security
Benchmark Reproducibility: Griffin AI vs Mythos
A benchmark you can't reproduce is marketing. A benchmark you can rerun on your own infrastructure is evidence. The reproducibility gap is wide.
Mar 16, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.