DevSecOps
Building security programs with limited headcount
The developer-to-security ratio is roughly 100:1. A framework for scaling AppSec impact through automation and enablement when hiring isn't the answer.
Jul 12, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCloud Security
The 2026 AWS Security Checklist: Account, IAM, Network, and Data Controls
One SSRF call against an unpatched WAF and a permissive IAM role were enough to expose 106 million Capital One records in 2019 — here's the checklist that stops it.
Jul 12, 20267 min read
Vulnerability Management
Text4Shell deep dive: how CVE-2022-42889 turned string formatting into RCE
CVSS 9.8. Apache Commons Text 1.5–1.9 ran attacker strings through a script interpolator by default — here's the root cause and the fix.
Jul 12, 20266 min read
Buyer's Guides
Best security champions program and developer training pl...
A practical buyer's guide to security champions program tools — evaluation criteria, six real vendors compared honestly, and how to measure whether training actually reduces vulnerabilities.
Jul 12, 20268 min read
Open Source
p-limit: Safe Concurrency Control in Node.js
The p-limit npm package caps how many promises run at once — a one-function library that quietly prevents self-inflicted outages, API bans, and resource exhaustion in Node.js services.
Jul 12, 20266 min read
Security
libwebp Vulnerability: What CVE-2023-4863 Means and How to Fix It
The libwebp vulnerability CVE-2023-4863 was a heap buffer overflow exploited in the wild. Here is what it affected, why it was everywhere, and how to fix it.
Jul 12, 20266 min read
Security
OpenRouter API: Security Considerations When Routing LLM Traffic
The OpenRouter API gives you one endpoint and one key to reach hundreds of LLMs across providers. That convenience concentrates risk in a single credential and a third-party hop worth securing deliberately.
Jul 12, 20265 min read
Incident Analysis
Shai-Hulud self-propagating npm worm campaign
Inside Shai-Hulud, the self-propagating npm worm that hijacked publish tokens to auto-infect hundreds of packages across the JavaScript ecosystem.
Jul 12, 20267 min read
Containers
K8s Admission Controllers: Enforcing Policy at the Kubernetes API
A k8s admission controller intercepts every request to the API server and can validate or mutate it, making it the natural enforcement point for security policy.
Jul 12, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.