Product
Products, Projects, SBOMs, Findings: How to Count Vulnerabilities
A Safeguard finding is one vulnerability on one component, checked against one gate. Dedupe findings to distinct CVEs before you report any count.
Oct 24, 202635 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSupply Chain Security
CoRIM and RATS Explained: Reference Manifests, EAT Tokens, Attestation
RATS defines who proves device state to whom; EAT carries the evidence and CoRIM carries the expected values. How they fit, with commands and tables.
Oct 24, 202651 min read
Supply Chain Security
GPU Firmware Explained: VBIOS, GSP, Signed Microcode and Updates
GPU firmware is the VBIOS in card flash plus signed microcode the driver loads into on-chip processors. How it boots, who signs it and how to check it.
Oct 24, 202641 min read
Supply Chain Security
IPMI Explained: BMC LAN Access, RMCP+ and How to Isolate It
IPMI lets a server's BMC be managed over UDP 623. How RMCP+ sessions work, why cipher 0 and RAKP are weak, and how to isolate or disable IPMI over LAN.
Oct 24, 202651 min read
Supply Chain Security
Tails Release History: Amnesia, Tor, Persistent Storage and Updates
Tails 7.15.1 (23 Oct 2026) is current, on Debian 13. Every major release since Amnesia in 2009, plus how Persistent Storage, verification and upgrades work.
Oct 24, 202649 min read
Supply Chain Security
Bottlerocket and Talos Linux Release History: Versions, Updates, Support
Bottlerocket reached 1.0 in August 2020 and Talos Linux in March 2022. How their versions, signed A/B updates, variants and support windows work.
Oct 24, 202641 min read
Supply Chain Security
Ubuntu Core Release History: Snaps, Updates, Encryption and Dates
Ubuntu Core ships every two years on an Ubuntu LTS base with 10 years of security fixes, 15 with Legacy. Core 16 to 26, snaps, rollback, FDE and dates.
Oct 24, 202643 min read
Supply Chain Security
GPON and XGS-PON Explained: OLTs, ONTs, OMCI and How to Secure Them
GPON and XGS-PON carry fibre broadband from an OLT through passive splitters to your ONT. How ranging, AES encryption, OMCI and ONT sign-on work.
Oct 24, 202636 min read
Supply Chain Security
BitcoinZ Counterfeit Block: How 105B BTCZ Passed Node Validation
BitcoinZ block 1,860,181 minted 105B BTCZ via unverified Sprout proofs and an int64 overflow. Upgrade every node to 2.3.1 and reconcile deposits.
Oct 24, 202636 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.