Product
Add Safeguard to Bitbucket Pipelines: SBOM, Scan and Policy Gate
Add one Bitbucket Pipelines step that runs safeguard ci scan to build an SBOM, scan dependencies and fail the build on a severity or a policy gate.
Oct 25, 202640 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Add Safeguard to Jenkins Pipelines: SBOM, Scan and Policy Gate
Add one declarative stage to your Jenkinsfile: store a Safeguard key as Secret text, run safeguard ci scan, and fail builds on severity or a policy gate.
Oct 25, 202641 min read
Product
Add Safeguard to GitLab CI: SBOM, Scan and Merge Request Policy Gate
Add one GitLab CI job that runs safeguard ci scan: each push gets an SBOM and a scan, and a policy gate or severity threshold can fail the merge request.
Oct 25, 202641 min read
Product
Pull vulnerability evidence for a bank IT exam in five days
Map each exam request to its source, agree one dated extract with engineering, check populations and log what you hand over. A day by day GRC plan.
Oct 25, 202638 min read
Product
Price an acquisition target's dependency debt into the deal
Turn a diligence scan into a remediation cost range: sort findings into cost classes, size each with the target's data, and show corp dev the assumptions.
Oct 25, 202639 min read
Product
Which security addendum terms can a SaaS vendor sign at renewal?
Test every term against what you did last quarter: sign what you already meet, counter what you cannot, and give each promise an owner, a metric and proof.
Oct 25, 202636 min read
Product
Internal Audit of AppSec at a Bank: Answering the Request List
Bank internal audit asks for AppSec policy, SDLC evidence, vulnerability SLAs, exceptions, open source records, change tickets and metrics. How to answer.
Oct 25, 202634 min read
Product
The First 72 Hours of a Dependency Incident at a Digital Health Company
A health tech CISO's 72 hour plan: confirm exposure, contain, run the HIPAA or FTC breach analysis, brief executives and hospitals, and keep the evidence.
Oct 25, 202639 min read
Product
Prepare for a State Insurance Exam IT Review as a CISO
The IT review follows NAIC Exhibit C. Answer the planning questionnaire early, stage evidence for change, patch and vendor controls, and log known gaps.
Oct 25, 202638 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.