AI Security
Audit trail for AI analyst actions: what to log
If an AI assistant touches your security tools, you need a record of what it saw, said and did. This guide lists the fields to log and how to keep them.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
The 16 MITRE ATLAS tactics explained for LLM applications
A plain-language walk through the 16 MITRE ATLAS tactics, from AI model access to lateral movement, with what each means for an LLM app you run.
Oct 18, 20264 min read
AI Security
ATLAS mitigations checklist for RAG systems
A checklist of MITRE ATLAS mitigations that apply to RAG systems: guardrails, telemetry, dataset provenance, validation, access control and agent limits.
Oct 18, 20264 min read
AI Security
What two ATLAS case studies teach about RAG attacks
Two MITRE ATLAS case studies, the Morris II worm and Slack AI exfiltration, show how a RAG index becomes an attack path. Here are the design lessons.
Oct 18, 20264 min read
AI Security
Are embeddings sensitive data? Embedding inversion explained
Treat embeddings like the data they came from. OWASP warns that attackers can reverse embeddings to recover source information. What that means for you.
Oct 18, 20263 min read
AI Security
RFP questions to ask when a security tool advertises AI features
Twelve RFP questions that separate real AI capability from marketing: models used, data sent, accuracy evidence, human review, and cost behavior at scale.
Oct 18, 20263 min read
AI Security
Approving AI agent actions from your phone: what to check first
Remote approval prompts for AI agents are only a control if you can read them. What the MCP spec and OWASP say and a checklist for small screens.
Oct 18, 20264 min read
AI Security
What to teach employees about using AI tools safely
A short training outline for staff using AI assistants: approved tools, what data stays out, how to check output, and reporting mistakes without blame.
Oct 18, 20263 min read
AI Security
AI risk assessment for one system: a step-by-step method
How to run an AI risk assessment on a single system using the NIST AI RMF: context, categories, impacts, tests, treatment and residual risk.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.