Developer Tools
Quantization explained: running models in 4-bit and 8-bit
Quantization stores model weights in fewer bits to cut memory and speed up inference. What it costs in accuracy and how to test it on your own task.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Quality gates on new code only: the clean as you code approach
Gating only new and changed code stops an old backlog from blocking every pull request. How the approach works, where it fails, and how to set it up.
Oct 18, 20263 min read
Developer Tools
QLoRA explained: tuning a large model on a single GPU
QLoRA trains LoRA adapters on top of a frozen 4-bit model. How it works, what the paper reports, and the trade-offs to check before relying on it.
Oct 18, 20263 min read
Developer Tools
PX4 failsafes explained: link loss, GPS loss and low battery
PX4 escalates failsafes from Warning through Hold, Return, Land and Disarm to Termination, and the most severe action wins when several trigger together.
Oct 18, 20264 min read
Developer Tools
A pull request template with a short security checklist
Add a pull request template with five security questions. Where the file goes on GitHub, a copyable checklist and why questions beat tick box statements.
Oct 18, 20263 min read
Developer Tools
What security reviewers need in a pull request description
A pull request description should say what changed and why. Add the data it touches, the trust boundary and the denied case test. Weak versus better examples.
Oct 18, 20263 min read
Developer Tools
Prototype pollution defenses: what actually helps in Node.js
Prototype pollution lets attackers change shared JavaScript objects. See OWASP's defenses: Map, null prototype objects, freezing, and the limits of each.
Oct 18, 20264 min read
Developer Tools
Prompting an AI for secure code: say what must be true, then verify
How to ask an AI assistant for code that handles untrusted input safely: name the threat, set constraints, ask for the reasoning, and check it with tests.
Oct 18, 20263 min read
Developer Tools
Prompt caching checklist: structure prompts to get cache hits
A practical checklist for ordering prompts, freezing tool lists, and avoiding the changes that silently invalidate a prompt cache and raise your bill.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.