Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (506)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1024)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (506)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (35)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Vulnerability Response (16)Risk Management (16)Threat Research (16)Tool Reviews (16)Agent Security (16)Cryptography (15)Compliance & Frameworks (15)Incident Response (15)Security Concepts (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Dependency Security (11)Data Breach (11)Web Security (11)Security News (10)Career (10)Enterprise (9)Culture (9)Company (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Dependency Management (7)Industry Insights (7)Industry Trends (7)How-To Guide (7)Secure Development (7)Zero-Day Exploits (7)Network Security (7)Dev Practices (6)Industry (6)Security Operations (6)Developer Security (6)Organizational Security (6)Vendor Comparison (6)Breach Analysis (5)Code Security (5)Mobile Security (4)Tool Comparisons (4)Product Launch (4)Policy (4)Cryptocurrency Security (4)Offensive Security (4)Regional Security (3)Healthcare Security (3)Hardware Security (3)Social Engineering (3)Governance (3)Startup Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Threat Modeling (1)Emerging Threats (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Buyer Guides (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Product

Policy Proxy for MCP Servers: Safeguard MCP Guardrail

Safeguard MCP Guardrail is a policy proxy between AI agents and MCP servers that allows, denies or monitors each JSON-RPC tool call.

Oct 23, 202639 min read
Product

Publish vs Share: Distributing SBOMs to Customers From Safeguard Portal

In Safeguard Portal, Publish freezes an immutable SBOM copy for a product version and Share sends that copy as-is, with every view and download logged.

Oct 23, 202641 min read
Product

Prioritise Vulnerabilities With Reachability, EPSS and KEV in Safeguard

Safeguard ranks findings by reachability, EPSS, CISA KEV and asset context into one 0 to 100 priority score. See how it works and how to defend the order.

Oct 23, 202642 min read
Product

From Plain English Security Policy to Release Gates in Safeguard

Write each rule as a plain English search, preview its matches, link it to a gate set to Block, Warn or Notify, then fail CI with one Safeguard CLI step.

Oct 23, 202639 min read
Product

Open Source License Obligations, OpenChain and Attribution With Safeguard

Safeguard identifies the open source licenses you ship, gates releases on license policy and builds NOTICE files mapped to OpenChain ISO/IEC 5230.

Oct 23, 202641 min read
Product

Monitor Before You Block: Safeguard AI Gateway and OWASP LLM Top 10

Safeguard AI Gateway checks prompts, responses and tool calls in monitor mode today; enforce mode is gated. How it maps to OWASP LLM risks.

Oct 23, 202641 min read
Product

VEX and CSAF in Safeguard: Telling Customers a CVE Does Not Affect You

Safeguard ingests CSAF 2.0, CycloneDX VEX and OpenVEX (GA) so findings show what does not affect you. Here is how to consume and share VEX you can defend.

Oct 23, 202638 min read
Product

Human Approval for Agent Actions in Safeguard Desktop and Mobile Apps

Safeguard's desktop and phone apps, let a person approve or deny each risky step a security agent takes on a computer running the CLI.

Oct 23, 202639 min read
Product

Find Every AI Model and SDK You Ship with Safeguard AI-BOM

Safeguard AI-BOM discovery inventories AI SDKs, model files, cloud AI endpoints and shadow AI into one AI-BOM. Here is how it works today.

Oct 23, 202638 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.