AI Security
Should an AI agent be allowed to suppress security findings?
An AI agent can draft a suppression with evidence, but a human should approve it. What agents may propose, what they may not do, and how to audit them.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Should AI coding agents start from your golden path templates?
Yes: point coding agents at the same templates, registries and merge gates as people. How to set it up, what to log and where agents need own limits.
Oct 19, 20264 min read
AI Security
Should AI agent read tools and write tools be on separate servers?
Splitting read tools from write tools into separate servers and identities makes least privilege easy to enforce. When it pays off and when it is overkill.
Oct 19, 20263 min read
AI Security
Shared credential or per-user sign-in for an MCP connector?
A shared key gives everyone the same access, while per-user OAuth ties access to a person. Compare both for security connectors, with a table to decide.
Oct 19, 20266 min read
AI Security
Self-hosted or vendor-hosted agent sandbox: who owns isolation?
A vendor-hosted agent sandbox hands isolation to the provider. A self-hosted one hands it to you. What each choice changes for egress, secrets, evidence.
Oct 19, 20266 min read
AI Security
What security training do data and ML engineers need?
Data and ML engineers need security training on data handling, notebook and pipeline hygiene, third party model and package risk, and access control.
Oct 19, 20263 min read
AI Security
What security training do developers building LLM apps need?
Developers building LLM apps and agents need training on prompt injection, output handling and excessive agency. Topics from the OWASP LLM Top 10 2025.
Oct 19, 20264 min read
AI Security
Scheduled tasks in an AI assistant: ten questions to ask first
Ten vendor-neutral questions to ask before trusting an AI assistant to run tasks on a schedule: where it runs, who it acts as, and how failures surface.
Oct 19, 20267 min read
AI Security
What's your SBOM story if your product has AI features?
Buyers now ask whether an SBOM covers AI components. What the 2026 CISA guidance says, what a startup can list today, and what to leave unclaimed.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.