Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
OpenSSF is a Linux Foundation project: a member-funded board, an elected TAC, open working groups and projects such as SLSA, Sigstore and Scorecard.
Studio's 30 Sep breach exposed every customer's forms, API keys and the decryption key, reaching Japan's Digital Agency. What happened and what to rotate.
Ruby 4.0.9, 3.4.12 and 3.3.13 fix the Onigmo regex bugs behind four GitLab RCEs. Any Ruby app compiling untrusted patterns should upgrade now.
OpenEoX (OASIS) and CLE (ECMA-428) are machine-readable formats for end of support and end of life dates. Here is what each covers and how to use them.
AP2 lets AI agents pay with signed mandates: open and closed checkout and payment mandates as SD-JWT credentials. How it works, its flows and its risks.
PV = nRT ties a gas's pressure, volume, amount and absolute temperature together. Where it came from, when it fails, and worked examples with numbers.
TACACS+ (RFC 8907) is the AAA protocol for logging in to routers and switches. How sessions, MD5 obfuscation and RFC 9887 TLS 1.3 on port 300 work.
A compromised login let someone copy California student files from an ETS SFTP site for four months. What was taken, what to do, and how to harden SFTP.
How encrypted messengers work: X3DH, PQXDH and the Double Ratchet for chats, MLS for groups, what metadata still leaks, and how to verify and lock down.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
