Developer Tools
What is an embedding, and why does code search use them?
An embedding turns text into a list of numbers so similar meaning lands close together. How that powers code search, and where it falls short.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
What is a token, and why LLM bills are measured in them
A token is the unit a model reads and writes. Learn what counts toward it, why input and output are billed apart, and why counts differ between models.
Oct 18, 20263 min read
Developer Tools
What is a quality gate in CI, and what should it check?
A quality gate is an automated pass or fail check on a change. Learn what it checks, how it differs from review, and how to design one that is not ignored.
Oct 18, 20263 min read
Developer Tools
What is a lockfile and why should you commit it?
A lockfile records the exact dependency tree so every install is the same. See what npm's package-lock.json stores and why committing it protects you.
Oct 18, 20263 min read
Developer Tools
What does the Safeguard iPhone app do? A plain explainer
The Safeguard iOS app is a companion to the platform: check posture, review findings with reachability evidence, track fixes and get alerts.
Oct 18, 20263 min read
Developer Tools
What does npm audit fix --force actually do, and is it safe?
npm audit fix upgrades within your declared version ranges. Adding force allows major version jumps that can break your app. Here is when to use each.
Oct 18, 20263 min read
Developer Tools
What does fine-tuning cost? A general budgeting guide
Fine-tuning cost is more than GPU hours. A budgeting guide to data, compute, evals, hosting and upkeep, with no made-up prices, so you can plan honestly.
Oct 18, 20263 min read
Developer Tools
What an AI code review bot cannot see in your pull request
AI review bots read the diff and some context, but miss intent, product fit and unlisted files. Here is what to keep for human reviewers and why.
Oct 18, 20264 min read
Developer Tools
What can a VS Code extension actually do on your machine?
VS Code extensions run with the same permissions as the editor itself. Here is what that means for files, network and processes, and what limits it.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.