AI Security
EU AI Act Enforcement: Year One Review
The first enforcement window under the EU AI Act has closed. The actual pattern of enforcement looks different from the one vendors and advocacy groups predicted.
Feb 15, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Securing MCP Servers in the Enterprise: A Practical Guide
MCP servers connect AI agents to your infrastructure. Here's how to secure them without killing the productivity gains.
Feb 15, 20267 min read
AI Security
AI Models in Your Supply Chain: The Security Risks Nobody Talks About
AI/ML models are the new open source libraries. Here's why your supply chain security strategy needs to account for model provenance, poisoning, and compliance.
Feb 15, 20263 min read
AI Security
PCI DSS 4.0 Alignment: Griffin AI vs Mythos
PCI DSS 4.0 raised the evidence bar for software security, supplier management, and continuous assurance. Griffin AI meets the new requirements with persisted records. Mythos-class pure-LLM tools leave QSAs asking for artifacts.
Feb 14, 20267 min read
AI Security
Framework Routing Awareness: Griffin AI vs Mythos
Every HTTP vulnerability begins at a route. Griffin AI models routing; Mythos-class tools guess it. That difference shapes every downstream finding.
Feb 14, 20267 min read
AI Security
The OWASP Top 10 for Large Language Model Applications: A Field Guide
A working breakdown of the OWASP Top 10 for Large Language Model Applications — what each risk actually looks like in production and how teams are testing for it.
Feb 14, 20267 min read
AI Security
SLSA Provenance Consumption: Griffin AI vs Mythos
SLSA provenance is the cryptographic receipt of a build. Griffin AI verifies it, parses it, and uses it as typed evidence. Mythos-class tools describe it and forget to check the signature.
Feb 13, 20267 min read
AI Security
Copilot Code Review Security: What It Misses
Copilot's code review is useful. It is also not a security review, and treating it as one is how vulnerabilities ship. Here is what it actually catches.
Feb 13, 20267 min read
AI Security
Griffin AI vs Reka Multimodal for Security
Reka's multimodal models are interesting for specific security workflows. The question is whether multimodal is the binding constraint, and usually it isn't.
Feb 12, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.