Container Security
Kubernetes Pod Security Standards explained
A breakdown of Kubernetes' Privileged, Baseline, and Restricted Pod Security Standards, how they replaced PodSecurityPolicy, and where enforcement typically fails.
Jun 26, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
How AppSec teams cut false-positive triage time
AppSec teams drown in false positives. See how Safeguard's supply-chain-native triage compares to Checkmarx's SAST-driven approach on reachability, context, and workflow fit.
Jun 26, 20268 min read
Cloud Security
AWS TEAM CVE-2025-1969: Spoofed Approvals in IAM Identity Center
AWS Security Bulletin AWS-2025-004 disclosed an input validation flaw in Temporary Elevated Access Management that let users forge approvals. Here's what changed and how to harden TEAM 1.2.2.
Jun 26, 20266 min read
Compliance
SBOM Template: How to Structure a Software Bill of Materials
A practical SBOM template covering the required fields, a ready-to-adapt CycloneDX skeleton, and the mistake of treating an SBOM as a document you fill in by hand.
Jun 26, 20265 min read
Container Security
Kubernetes securityContext settings guide
A field-by-field guide to Kubernetes securityContext: which settings stop container breakouts, how to enforce them cluster-wide, and how to audit gaps.
Jun 26, 20266 min read
Security
ngx-bootstrap Security: What to Know After the 2025 npm Compromise
ngx-bootstrap is a popular Angular component library that was hit by a real npm supply-chain attack in September 2025. Here is what happened, what to check, and how to use it safely.
Jun 26, 20266 min read
Application Security
API security and the rise of shadow/zombie APIs
Shadow and zombie APIs caused breaches at Optus, T-Mobile, and Peloton. Here's why code-scanning tools miss them and what API security best practices actually work.
Jun 26, 20267 min read
Security
Interactive Application Security Testing Tools: How IAST Works and When to Use It
IAST watches your running application from the inside during normal testing, catching real, reachable flaws that static scanners can only guess at.
Jun 26, 20267 min read
Container Security
Kubernetes RBAC best practices
RBAC drift and over-broad bindings are the top cause of Kubernetes lateral movement. Six concrete, question-first practices to lock down access before it's exploited.
Jun 26, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.