Product
NIST CSF 2.0 in Safeguard: Govern, Supply Chain and Automated Tests
Safeguard scans check CSF 2.0 inventory and supply chain outcomes, connector tests evidence dozens more, and you still own your profiles and Tiers.
Oct 25, 202637 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
NIST SSDF in Safeguard: What a Scan Checks and What You Still Prove
A Safeguard scan decides six SSDF checks on SBOM provenance, hashes, suppliers, identifiers and versions. Most SP 800-218 practices need your evidence.
Oct 25, 202638 min read
Product
HIPAA Security Rule in Safeguard: Risk Analysis, Safeguards and Evidence
Safeguard's compliance suite (GA) checks six HIPAA Security Rule requirements on each scan and tracks evidence for the rest. It prepares, never certifies.
Oct 25, 202638 min read
Product
ISO 27001:2022 in Safeguard: Annex A Controls, the SoA and Evidence
Safeguard's compliance suite (GA) checks six Annex A controls on every scan, tracks the rest with tests and evidence, and records SoA scope decisions.
Oct 24, 202637 min read
Supply Chain Security
Fibre Channel Explained: Fabrics, Zoning, FC-SP and SAN Security
Fibre Channel is a dedicated storage network standardised by INCITS. How fabrics, logins, zoning, LUN masking and FC-SP security actually work.
Oct 24, 202642 min read
Product
Working Toward SOC 2 With Safeguard: Controls, Tests and Evidence
Safeguard's compliance suite (GA) maps SOC 2 criteria to scans, connector tests and evidence so you reach audit with a live record, not a spreadsheet.
Oct 24, 202637 min read
Supply Chain Security
AI Agent Evaluation: Task Suites, Trajectory Grading and LLM Judges
How to evaluate AI agents: task suites, trajectory grading, LLM judges and their biases, pass@k versus pass^k, sandboxes, telemetry and safety tests.
Oct 24, 202642 min read
Supply Chain Security
PROFINET Explained: Real-Time Classes, DCP and PROFINET Security
PROFINET is PI's industrial Ethernet standard in IEC 61158 and 61784. How RT, IRT and TSN work, why DCP is unauthenticated, and Security Classes 1 to 3.
Oct 24, 202643 min read
Supply Chain Security
Archimedes' Principle Explained: Ships to Hot Air Balloons
Buoyant force equals the weight of the fluid an object displaces. The pressure proof, plus worked examples for blocks, ships, hot air balloons and density.
Oct 24, 202643 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.