Product
Minimum release age / cooldown policies for new package v...
A cooldown on new npm package versions can block malicious releases before they reach your build. Here's how minimum release age policies work.
May 7, 20269 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Pull-request-level dependency scanning on GitHub
Socket.dev popularized flagging risky dependencies inside GitHub pull requests. Here's how that scanning works, where it falls short, and what closes the gaps.
May 7, 20267 min read
Product
How Safeguard Auto-Fix Actually Works Under the Hood
A technical breakdown of Safeguard's automated vulnerability remediation engine, from dependency resolution to pull request generation and compatibility verification.
May 5, 20267 min read
Product
Safeguard IDE Extension v5: Security Feedback Where Developers Actually Work
The Safeguard IDE Extension v5 brings SBOM generation, vulnerability alerts, and policy checks directly into VS Code and JetBrains IDEs. A deep dive into what changed and why it matters.
Apr 28, 20267 min read
Product
CNAPP vs. CSPM: how the categories relate
CSPM is a module inside CNAPP, not a rival to it — and neither covers what happens before deployment. Here's how Wiz's cloud posture graph and Safeguard's supply chain layer fit together.
Apr 24, 20267 min read
Product
Enterprise Software Supply Chain Management with Safeguard ESSCM
A practical guide to implementing Safeguard's Enterprise Software Supply Chain Management framework across large organizations with complex dependency ecosystems.
Apr 23, 20267 min read
Product
Safeguard Portal Deep Dive: Navigating the Security Dashboard
A comprehensive walkthrough of the Safeguard portal, covering every panel, metric, and workflow that security teams use daily to manage software supply chain risk.
Apr 18, 20267 min read
Product
Securing the cloud with Cortex XSOAR and Prisma Cloud (SO...
Cortex XSOAR and Prisma Cloud automate cloud incident response, but SOAR reacts to runtime alerts. Here's why supply chain provenance still needs a separate layer.
Apr 7, 20267 min read
Product
Safeguard Q1 2026 Release Recap
A quarterly recap of Q1 2026 at Safeguard: the signed chain from source to runtime, self-healing GA, taint tracking, and the air-gap installer.
Mar 31, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.