Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
An EV charger pairs power electronics and a legal-for-trade meter with a Linux controller that speaks OCPP and ISO 15118. Here is how one is built.
A CubeSat is built from 10 cm units: an aluminium frame, solar power, radios and flight software. How each part is made, tested, licensed and secured.
A drone is a frame, brushless motors, ESCs, a flight controller, GNSS, radios, a lithium pack and firmware. Here is each build step and what to secure.
Connected cars collect location, driving, voice and phone data. Who receives it, what US and EU regulators require, and how to limit what you share.
CERT Polska disclosed 11 flaws in the CGM CLININET hospital system on 23 Oct 2026. Five are fixed in 2026.MS3, six have no stated fix. What to do now.
The PHP Foundation is a sponsor funded collective, formed in November 2021, that pays core developers to maintain and secure PHP. Here is how it works.
Roundcube 1.6.20 and 1.7.5 fix 20 flaws, including IMAP command injection and a session object injection primitive. Versions, CVEs and how to patch now.
Apache Tomcat disclosed eight CVEs on 20 Oct 2026, led by a JNDIRealm login bypass. Upgrade to 11.0.27, 10.1.61 or 9.0.123; 8.5 and 7.0 get no fix.
NLWeb turns a site's Schema.org and RSS data into an /ask endpoint and an MCP server. How it works, what it exposes, and how to lock it down.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
