AI Security
Container Malware Scanning: Finding Threats in Your Images
Container malware scanning inspects image layers for malicious binaries, backdoors, and tampered dependencies before they ever run in your cluster.
Apr 9, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
AI Data Quality: Why It Matters for Model Security
Poor AI data quality is not just an accuracy problem — it's an attack surface. Here's how data integrity, provenance, and validation shape the security of the models you ship.
Apr 9, 20266 min read
AI Security
OWASP Top 10 for LLM Applications, Explained
A practitioner's walkthrough of the OWASP Top 10 for LLM Applications: what each risk looks like in a real system, which ones bite first, and the mitigations that hold up.
Apr 9, 20266 min read
AI Security
Claude Code and AI Coding Agent Security Basics
Anthropic Claude Code security rests on permission gating, sandboxed execution, and human approval for risky actions — the same fundamentals any AI coding agent needs before it's allowed to run commands or edit code unattended.
Apr 9, 20265 min read
AI Security
Container Image Solutions: Building and Shipping Secure Images
Container image solutions span how you build, store, scan, and sign images. Choosing them well is what turns a container pipeline into a secure supply chain rather than a liability.
Apr 8, 20266 min read
AI Security
LLM Traces and Evals: The Missing Layer in AI Supply Chain Security
Prompt traces and offline evals are standard hygiene for ML teams, but almost nobody treats them as supply chain telemetry. They should be. Here's how traces and evals plug into SBOM and reachability as a fourth security signal.
Apr 8, 20267 min read
AI Security
Enterprise MCP Registry Onboarding Process
A repeatable onboarding flow for adding MCP servers to an enterprise registry without becoming the team that says no to everything.
Apr 8, 20267 min read
AI Security
Agentic AI Budget Explosions And Cost Controls
Agent runaway is no longer a theoretical risk — it is a line item on quarterly variance reports. The 2026 trend in agentic AI is less about model capability and more about who pays when an agent loops.
Apr 8, 20267 min read
AI Security
Docker + MCP: Running MCP Servers in Containers Securely
MCP servers run with your credentials and your filesystem unless you say otherwise. Containerizing them with read-only mounts, dropped capabilities, and egress controls turns an open-ended trust grant into a bounded one.
Apr 8, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.