Research
How do AI agents change the threat model for hospital robots?
Hospital and surgical robots run software with dependencies, update paths and network links. See what changes when AI agents join and what to read.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedResearch
Hospital robots: what defenders should inspect first
An inspection order for security teams covering hospital robots: asset list, network paths, remote access, update path and what to ask vendors for.
Oct 18, 20264 min read
Research
Software supply chain attacks 2018 to 2025: a plain language timeline
Nine well documented software supply chain events from 2018 to 2025, explained plainly, each with a primary source and the pattern they share.
Oct 18, 20264 min read
Research
Steel mills and AI agents: how the threat model changes
AI agents and robots in heavy industry change what an attacker can reach. Ask what an agent can touch, who can instruct it and how it stops.
Oct 18, 20265 min read
Research
Steel mill cybersecurity: what defenders should inspect first
A first-week walk-through for a steel mill's control systems: map remote access, isolate networks, inventory software and plan for safe manual operation.
Oct 18, 20264 min read
Research
SPDX or CycloneDX: which SBOM format should a non-engineer ask for?
Both are accepted standards for a software bill of materials. SPDX grew from license compliance, CycloneDX from security. Ask for either, machine-readable.
Oct 18, 20264 min read
Research
SPDX vs CycloneDX: which SBOM format should engineers pick?
Both formats meet the US minimum SBOM elements. SPDX is ISO/IEC 5962 and strong on licensing. CycloneDX is ECMA-424 and broad on BOM types. Pick by user.
Oct 18, 20264 min read
Research
Software supply chain security glossary: 62 terms engineers use
A plain-language cheat sheet of 62 software supply chain security terms, from SBOM and VEX to provenance and reachability, with links to the standards.
Oct 18, 20265 min read
Research
Software supply chain security glossary: 150 terms defined
A plain English glossary of 150 software supply chain security terms, from SBOM and VEX to SLSA, typosquatting and reachability, with primary sources.
Oct 18, 202610 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.