Research
Median time to fix by ecosystem: what public data says and does not
No study gives a clean median time to fix for every ecosystem. Here is what three public sources measure, why numbers differ, and how to read them.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedResearch
How many open source vulnerabilities are there? NVD and OSV data
We queried the NVD API and OSV feeds on 18 October 2026. CVE records per year, OSV records per ecosystem, and why malware reports change the picture.
Oct 18, 20265 min read
Research
How many CVEs are in CISA KEV, and what do they have in common?
The KEV catalog held 1,748 CVEs on 16 October 2026. Counts by year, vendor and weakness type, how entries qualify, and what to take from the pattern.
Oct 18, 20265 min read
Research
GitHub Copilot: what do you pay for and what is included?
Published Copilot prices and limits fetched on 18 October 2026: plan fees, AI credits, what draws them down and what happens at the limit. No cost claims.
Oct 18, 20265 min read
Research
What should defenders inspect first on a food processing line?
Start with how people and vendors reach the line, then network seams, controllers and backups. A calm first week checklist using NIST and ISA/IEC 62443.
Oct 18, 20264 min read
Research
Elevator maintenance: why SBOMs for machines and firmware matter
Elevator controllers run firmware too. Ask suppliers for SBOMs and hardware part lists, keep a service inventory, and use NIST OT guidance for the rest.
Oct 18, 20264 min read
Research
Electric utility OT: what defenders should inspect first
A first-inspection order for utility security teams: asset inventory, remote access, vendor software, update paths and AI tools near control systems.
Oct 18, 20264 min read
Research
Drone inspection: what should defenders check first?
Treat a drone as a networked computer. Check where its data goes, who controls firmware updates, and how the fleet is separated from your network.
Oct 18, 20264 min read
Research
Drone inspection fleets: do SBOMs and firmware lists help?
Inspection drones run firmware, apps and cloud links. Keep a fleet inventory, ask vendors for SBOMs, and read CISA's UAS guidance. A practical start.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.