Product
Japan software supply chain and AI security rules: a 90-day plan
Japan's Active Cyber Defense law, FSA guidelines, METI's SBOM guide, APPI and the AI Promotion Act: what each asks of software, dates and a 90-day plan.
Oct 25, 202638 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Canada Software Supply Chain and AI Security Rules: A 90-Day Plan
OSFI B-13 and B-10, the new Critical Cyber Systems Protection Act, CPCSC, PIPEDA, Quebec Law 25 and AI rules in Canada, with a 30/60/90-day plan.
Oct 25, 202636 min read
Product
France software supply chain and AI security rules: a 90-day plan
France's NIS2 law is still in Parliament, but DORA, the EU CRA, the CNIL and ANSSI rules already set software duties. Who owns what, and a 90-day plan.
Oct 25, 202638 min read
Product
Saudi Arabia Software Supply Chain and AI Security Rules: 90-Day Plan
Which NCA, SAMA, PDPL and SDAIA rules govern the software, open source and AI you run in Saudi Arabia, what evidence they ask for, and a 90-day plan.
Oct 25, 202637 min read
Product
India software supply chain and AI security rules: a 90-day plan
CERT-In, SEBI CSCRF, RBI, DPDP Rules 2025 and India's AI guidelines: what each asks of your software and suppliers, the dates, and a 90-day plan.
Oct 25, 202639 min read
Product
Every Safeguard Integration Explained: A Hub for Each Card
A map of every card on Safeguard's Integrations page: SCM, registries, AI models, uploads, posture and security testing, with links to each deep dive.
Oct 25, 202632 min read
Product
Stream Claude Audit and Compliance Activity Into Safeguard
Feed Claude's Compliance API Activity Feed into Safeguard with a key scoped only to read:compliance_activities, then review events and alerts in one place.
Oct 25, 202636 min read
Product
Scan Images in Amazon ECR, Azure Container Registry, Docker Hub and GCP with Safeguard
The exact read-only credential each registry needs, how to connect Amazon ECR, Azure Container Registry, Docker Hub and Google Artifact Registry to Safeguard, and the limits to plan around.
Oct 25, 202640 min read
Product
Scan Images in Artifactory, Nexus, Harbor and Quay with Safeguard
Per-registry setup: read-only credentials, digest pinning and signed push webhooks for Artifactory, Nexus, Harbor and Quay, with or without Safeguard.
Oct 25, 202639 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.