AI Security
Guard proxy errors decoded: 401, 403, 404, 429 and 502 explained
What each Guard proxy response means, from JSON-RPC code -32000 to a bare 401 or 404, and the first thing to check for each.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
How Guard policy rules are evaluated: priority and first match wins
Guard checks MCP requests against rules in priority order and applies the first match. What a rule can match, the three actions, and common mistakes.
Oct 18, 20264 min read
AI Security
Guard input and output filters for MCP tool calls, explained
Guard rules can inspect tool inputs before a call and mask or cap tool outputs after. The filter types, what they catch, and where regex filters fall short.
Oct 18, 20264 min read
AI Security
What the Guard audit trail records for every MCP call
Guard logs every MCP request it evaluates, allow, deny or monitor, with scores and rule IDs. What is stored, how long, how to query it, and what is not live.
Oct 18, 20264 min read
AI Security
GPAI models with systemic risk: Articles 51 and 55 explained
How a general-purpose AI model is classed as systemic risk, the compute presumption, and the extra duties: testing, incident reports and security.
Oct 18, 20263 min read
AI Security
AI Overviews and the glue on pizza answer: what Google said went wrong
In May 2024 Google explained odd AI Overviews answers: data voids, satire and forum posts. What it said, which examples were faked, and what changed.
Oct 18, 20263 min read
AI Security
The first hour after an AI agent is hijacked: a response plan
An agent followed injected instructions and acted. In the first hour: stop it, revoke its access, preserve logs, scope the damage, then fix the path.
Oct 18, 20263 min read
AI Security
Can fine-tuning weaken a model's safety? What research found
Research shows custom fine-tuning can erode safety alignment, even with benign data. What it means and how to test a tuned model before shipping.
Oct 18, 20263 min read
AI Security
False RAG entry injection: what it is and why it evades monitoring
A fake document hidden inside a normal RAG entry can be treated as a separate result. What ATLAS says about it and how to reduce the exposure.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.