Safeguard on social

Ask Claude "which 5 things do I fix first?" with Safeguard added from the connector directory. Claude reads your Safeguard data, puts known exploited and reachable-with-a-fix findings first, uses severity only to break ties, and batches every vulnerability on one package into one upgrade. Read only by default; a person makes the change. Walkthrough: https://na2.hubs.ly/H08Kv0d0 Video: Mixkit stock footage (Mixkit Stock Video Free License). The chat and ranking graphics are illustrations; the vulnerability detail screen is the real Safeguard app. #AppSec #DevSecOps #Shorts

Chainguard changes your base image. Safeguard Gold fixes the one you already chose. We are a competitor, so read this as a vendor's view. Per the post, Chainguard has the larger, more mature container catalog, with distroless images, FIPS variants and a CVE SLA on paid plans. Its own FAQ defines zero CVE as no known CVEs at publish time, which is worth reading closely. Safeguard Gold rebuilds the images you run and serves them through https://lnkd.in/gwiqeFis by the same pull path. It also covers what Wolfi is, who controls it, when to choose each, and a container bake-off checklist. Compared as of 28 October 2026, with sources. The full comparison: https://lnkd.in/gf97_j6K

New minimal base image, or fixes for the images you already run? We compare Chainguard Images and Wolfi with Safeguard Gold. We are a competitor, so the post credits Chainguard's larger catalog and says when to pick it. As of 28 October 2026. Read it: https://na2.hubs.ly/H08L9lC0

Which 5 things do I fix first? Ask Claude in plain English with Safeguard added from the connector directory. Known exploited flaws and reachable ones with a fix go first, severity only breaks ties, and every vulnerability on one package becomes one upgrade. Read only by default; a person makes the change. https://na2.hubs.ly/H08Ktn-0

Every codebase has a haunted package. The one nobody remembers adding, nobody owns, and nobody dares touch. Happy Halloween. Enjoy the candy, and if you want one small trick before Monday: pick a dependency you cannot explain and find out who added it and why. #Halloween #SupplyChainSecurity #AppSec

Boo. There is a ghost in your dependency list. The package you forgot about is still in there. Happy Halloween from the Safeguard team. #Halloween #DevSecOps #SupplyChainSecurity #AppSec #Developers

On a Friday at ten to five, an email arrives with two lines: send me everything you hold about me, and delete my account. The one month clock started when it landed. Mira and Cal follow that request through a small software company and sit in the reviewer's chair: the received date, who checked identity, which systems were searched, who reviewed the package, and the day the answer went out. They explain the one month deadline in Article 12 and the extension rule, how to confirm who is asking without collecting a passport scan, why logs with IP addresses count, what to do about backups when someone asks for erasure, how to correct data and tell the recipients, what data portability covers, and what a record of processing is for. They also cover the controller and processor question for a company that sells to businesses, and where Safeguard fits on the software evidence side without making anyone compliant. Before that, three stories: the noyb complaints against Scale AI filed on 27 October (allegations, with the company's response), the French regulator's fine against Extia over erasure requests, and the draft EDPB guidelines on fines that are open for comment until 13 November. Theo asks whether your deletion button really deletes, and the episode ends with a checklist for before your window opens. If you run a small software company and need to answer GDPR data subject requests, this episode covers the one month deadline under Article 12, identity checks, the right of access, the right to erasure and backups, rectification, data portability, the record of processing under Article 30, controller and processor roles, and the audit evidence a regulator or customer reviewer asks to see. It also looks at EDPB draft fining guidelines and recent enforcement by the CNIL. Topics: GDPR, data subject access request, DSAR, right to erasure, data portability, record of processing, controller and processor, audit evidence, audit readiness, EDPB, CNIL, noyb, Scale AI, Extia. Chapters: 00:00 Cold open 00:50 Intro 01:25 News: noyb and Scale AI, the Extia fine, the EDPB fining guidelines 05:18 Audit story: the Friday inbox 07:42 Deep dive: the one month clock, access, erasure, backups and the record 14:34 Practitioner corner 15:33 Checklist: before the next request 17:08 Outro Links: Safeguard: https://safeguard.sh/?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 How to answer a GDPR data subject access request step by step: https://safeguard.sh/resources/blog/how-to-answer-a-gdpr-dsar-step-by-step?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 DSAR export pipeline architecture: https://safeguard.sh/resources/blog/dsar-export-pipeline-architecture?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Verify a requester's identity without collecting more data: https://safeguard.sh/resources/blog/verify-requester-identity-without-collecting-more-data?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Erasure requests and backups: what to do: https://safeguard.sh/resources/blog/erasure-requests-and-backups-what-to-do?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Rectification requests: propagate corrections: https://safeguard.sh/resources/blog/rectification-requests-propagate-corrections?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Data portability, Article 20: export format choices: https://safeguard.sh/resources/blog/data-portability-article-20-export-format-choices?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 The Article 30 record of processing: the engineering view: https://safeguard.sh/resources/blog/ropa-article-30-fields-engineering-view?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Is an IP address in a log personal data?: https://safeguard.sh/resources/blog/is-an-ip-address-in-a-log-personal-data-gdpr?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 GDPR for VPs of engineering: requests, deletion and transfers: https://safeguard.sh/resources/blog/gdpr-for-vps-of-engineering-requests-deletion-and-transfers?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 GDPR Article 32 and Article 28 evidence in the Safeguard compliance suite: https://safeguard.sh/resources/blog/gdpr-article-32-and-article-28-evidence-in-the-safeguard-compliance-suite?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 More episodes: https://safeguard.sh/podcast?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03 Listen on Spotify: https://open.spotify.com/show/03400grx1OHf5tmZ1qrsdb?utm_source=podcast&utm_medium=video&utm_campaign=the-audit-window&utm_content=ep03

Is Safeguard SOC 2 compliant? Six minutes, straight answers. Ask Safeguard, Episode 4 is now on YouTube: SOC 2 and compliance, what is true today. The questions a vendor review asks, plus how to automate evidence without the screenshot sprint. Link in bio.

Is Safeguard SOC 2 compliant? Six minutes, straight answers, now on YouTube. Ask Safeguard, Episode 4: SOC 2 and compliance, what is true today. Mira asks the questions a vendor review asks and Cal answers from our published pages: Safeguard is SOC 2 Type I and Type II audited, what a readiness score is and is not, how to automate evidence without the screenshot sprint, and what to ask any security vendor for. Watch: https://lnkd.in/g_rC7H4w

Ask Safeguard, Episode 4 is now on YouTube: SOC 2 and compliance, what is true today. Six minutes on the questions a vendor review asks, and how to automate evidence without the screenshot sprint. Watch: https://na2.hubs.ly/H08L9jH0

Rebuilt dependencies by default, or fixes for what you already use plus a gate at install time? We compare Chainguard Libraries with Safeguard Gold and Package Firewall for Java, Python and JavaScript. We are a competitor, so the post credits Chainguard's strengths too. As of 28 October 2026. Read it: https://na2.hubs.ly/H08L9jh0

Chainguard Libraries serves rebuilt Java, Python and JavaScript dependencies by default. Safeguard fixes what is vulnerable and blocks bad installs. We are a competitor, so read this as a vendor's view. Per the post, Chainguard has the more developed rebuilt library catalog, with malware scanning, cooldowns and a verification command. Safeguard's side: Gold serves fixed builds under the same names and passes everything else through, and Package Firewall makes the install time decision for npm and pip. The two can sit side by side. It also covers checksum changes on rebuilt packages, when to choose each, and a bake-off checklist. Compared as of 28 October 2026, with sources. The full comparison: https://lnkd.in/gPcZA7DJ

Rebuilt dependencies by default, or fixes for the packages you already use plus an install time gate? Chainguard Libraries vs Safeguard Gold and Package Firewall, for Java, Python and JavaScript. We are a competitor, so the post credits Chainguard's strengths. As of 28 October 2026. Link in bio: safeguard.sh/resources/blog

Safeguard FM is live, 24/7. Ambient music for security engineers: focus music for deep work and code review. Headphones on, terminal open. Link in bio (YouTube, live now).

We built a radio station for people who read diffs for a living. Safeguard FM is live on YouTube, 24/7: ambient music for security engineers. Put it on for deep work, code review, or that long dependency audit you keep putting off. No talking, no ads, just something calm behind the terminal. It is on right now: https://lnkd.in/gjyVSEHe

Safeguard FM is live on YouTube, 24/7. Ambient music for security engineers: focus music for deep work and code review. Put it on in the background and get a long task done. Tune in: https://na2.hubs.ly/H08L9jg0