Product
Minimum release age / cooldown policies for new package v...
A cooldown on new npm package versions can block malicious releases before they reach your build. Here's how minimum release age policies work.
May 7, 20269 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Pull-request-level dependency scanning on GitHub
Socket.dev popularized flagging risky dependencies inside GitHub pull requests. Here's how that scanning works, where it falls short, and what closes the gaps.
May 7, 20267 min read
Product
CNAPP vs. CSPM: how the categories relate
CSPM is a module inside CNAPP, not a rival to it — and neither covers what happens before deployment. Here's how Wiz's cloud posture graph and Safeguard's supply chain layer fit together.
Apr 24, 20267 min read
Product
Securing the cloud with Cortex XSOAR and Prisma Cloud (SO...
Cortex XSOAR and Prisma Cloud automate cloud incident response, but SOAR reacts to runtime alerts. Here's why supply chain provenance still needs a separate layer.
Apr 7, 20267 min read
Product
Safeguard Q1 2026 Release Recap
A quarterly recap of Q1 2026 at Safeguard: the signed chain from source to runtime, self-healing GA, taint tracking, and the air-gap installer.
Mar 31, 20267 min read
Product
Introducing the Safeguard Marketplace: Extend Your Supply Chain Security
The Safeguard Marketplace brings community-built integrations, policy templates, and compliance packs to the platform.
Mar 25, 20265 min read
Product
Introducing Safeguard TPRM: Evidence-Based Third-Party Risk Management
Safeguard's new TPRM module replaces vendor questionnaires with SBOM-driven, continuous third-party risk assessment.
Mar 22, 20267 min read
Product
Safeguard Local Runner: Agentic Security on Your Laptop
The Local Runner is a command-line agent that runs Safeguard workflows against your working tree. Think claude-code-for-security, but for supply chain.
Mar 13, 20267 min read
Product
Safeguard March 2026 Release Notes
March 2026 at Safeguard: Griffin taint tracking, Eagle SBOM-driven advisories, Lion cross-service baselines, and the new runner air-gap installer.
Mar 10, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.