Safeguard
Changelog

What's new in Safeguard.

Releases of the Griffin model lineup, Eagle and Lion, the scanner fusion, MCP Server, and the platform that runs them. Subscribe to the RSS feed for shipping-day notifications.

Subscribe (RSS)
◈ the drill — nothing ships without an eval pass and a signed artefact
v4.7.0
Latest Release
May 2026
Shipped
8
Releases Listed
/feed.xml
RSS Feed
2026.10.27.154
October 2026
Release

This release improves user registration workflows and updates desktop security controls.

  • New: New workspace signups inform users that their administrator must approve the account before access is granted.
  • New: Single sign-on requests now require administrator approval and follow streamlined routing rules.
  • Fixed: The command line interface no longer gets stuck in recursive loops when processing self-referencing configurations.
  • Security: Hardened desktop application security by disabling unauthorized node execution, restricting external URL forwarding, and isolating session storage.
  • Security: Added strict navigation guards and permission handlers to the desktop application session.
2026.10.27.148
October 2026
Release

This release improves the accuracy and consistency of scanner findings across dependency and code analysis, cleans up stale results on rescans, and hardens the desktop application.

  • New: Dependency scans now distinguish your declared direct dependencies from packages added by resolution, giving a truer picture of direct versus transitive risk.
  • New: SAST findings now include a CVSS v3.1 vector, score and matching severity.
  • New: SAST and change-review findings now show their CWE category, source commit and fix state.
  • New: Change-log findings now show the repository and commit they came from.
  • New: Rescans now retire checks, provenance, postures and commits from the previous scan so results reflect only the latest state.
  • New: Scanner findings are now normalised with consistent severity casing, location fields and source component information.
  • New: Code quality now reports only metrics that were actually measured.
  • New: Security Posture and Code Quality now list only their own checks.
  • New: Project Details now shows identifiers in the CVE column, accurate CVSS values where they apply, and clear empty states where they do not.
  • New: Rows where CVSS does not apply now explain why.
  • Fixed: Transitive dependency resolution is now mapped onto the scanned inventory, preventing incorrect versions from appearing in results.
  • Fixed: Findings from your project's own code now keep their correct source component type.
  • Fixed: Previously retired checks, provenance, postures and commits no longer appear by default after a rescan.
  • Fixed: GitHub API responses are now cached across scans and revalidated, making scans faster.
  • Security: Hardened the desktop application's runtime security configuration to prevent unauthorized code execution and debugging on Windows, Linux and macOS.
  • Security: Updated the desktop application's runtime components.
  • Security: External links opened from the desktop app are now restricted to allowed URL schemes.
  • Security: Added guards against untrusted redirects and frame navigation in the desktop app.
  • Security: Desktop app session permission requests are now checked before being granted.
  • Security: Hardened desktop app message handling and sandboxed the settings view.
  • Security: Development hooks are no longer enabled in production desktop builds.
  • Security: Removed the development deep link scheme from production desktop builds.
  • Security: The authenticated desktop app no longer loads third-party font stylesheets.
v4.7.0
May 2026
Release

Griffin XL (671B-MoE) general availability for Sovereign deployments.

  • Griffin XL now available in Sovereign and Air-Gapped deployment tiers, with documented multi-GPU sizing from 11x H100 (Growth) to 22x H100 multi-AZ (Mature).
  • Long-context retrieval gates pre-rank call-graph chunks before attention — 18% reduction in time-to-first-token at 256k context.
  • Adversarial disproof pass now runs in parallel with the main reasoning head; end-to-end p95 latency for a Griffin XL verdict drops to ~12s.
  • Reasoning trace format gains an explicit DISPROOF ATTEMPT field — every finding ships with the refutation the model tried and failed.
v4.6.0
April 2026
Release

Eagle ranking-head v2 — 12% precision uplift on cross-package taint paths.

  • Eagle's clustering head retrained on a larger labelled taint-path dataset; top-5 candidate-path recall now at 94%.
  • p95 sweep latency on a 5k-package monorepo: 420ms (was 510ms).
  • Eagle now emits a confidence score per candidate path — Griffin routes only above-threshold candidates by default.
  • INT8 quantisation pipeline for Eagle published — cost-per-scan on shared cloud tiers drops 22%.
v4.5.0
March 2026
Release

Lion in JetBrains and Cursor (in addition to VS Code).

  • JetBrains plugin (IntelliJ IDEA, PyCharm, GoLand, WebStorm) ships with the Lion 1B inline model bundled.
  • Cursor extension now mirrors the VS Code feature surface — on-save scan, hover enrichment, one-click safe upgrade.
  • Lion weights now ship as signed sigstore bundles; the IDE extension verifies on install and refuses an unsigned weight file.
  • Sub-100ms p95 maintained on M-series Apple Silicon and recent x86 GPU laptops.
v4.4.0
February 2026
Release

MCP Server — per-tool capability scoping and sensitive-data egress guardrails GA.

  • Capability scoping per tool: read-only, sandboxed-write, ephemeral-write, and full-write modes selectable per agent identity.
  • Inline output scanning for PII, secrets, and proprietary code patterns — backed by Lion on the egress path.
  • Cryptographic chain-of-custody on every tool call: prompt, tool name, arguments, output hash, policy decision.
  • Drop-in compatibility verified against Claude Code, Cursor, Cline, and the OpenAI Agents SDK.
v4.3.0
January 2026
Release

Eleventh scanner added — SCC (Source Code Complexity).

  • SCC integrated as the 11th scanner. Complexity and churn metrics fold into the Eagle ranking signal.
  • Cross-scanner dedup now also collapses findings by (component, function, sink) when SCC indicates the same code-path is responsible.
  • New triage view in the console: surface high-complexity files where Griffin found a recently-introduced taint flow.
v4.2.0
December 2025
Release

DORA and NIS2 compliance packs released.

  • Pre-mapped control narratives for DORA (Digital Operational Resilience Act) and NIS2.
  • Continuous evidence collection — auditor view shows live posture, not point-in-time PDFs.
  • One-click export packages signed SBOM, VEX, and provenance for each in-scope service.
  • Vendor concentration heatmap added to TPRM for DORA Article 28 third-party risk reporting.
v4.1.0
November 2025
Release

SARIF and CycloneDX export updated to spec v1.6.

  • CycloneDX 1.6 supported on both ingest and export, including the new licensing model and vulnerability-affects fields.
  • SARIF output gains structured Griffin reasoning traces under the standard properties bag.
  • Backwards-compatible export of CycloneDX 1.5 and 1.4 retained for older consumers.
v4.0.0
October 2025
Release

Air-gapped offline vulnerability DB sync — delta sync instead of full pull.

  • Air-gapped customers can now sync NVD, OSV, EPSS, KEV, and GHSA deltas via approved one-way conduits without pulling the full archive each time.
  • Sync conduit format documented (CycloneDX-style envelope + sigstore signature) so customers can write their own ingestion if needed.
  • Full release SBOM, VEX, and provenance now bundled with every air-gapped sync drop.

Stay in the loop. Subscribe to the changelog.

RSS feed at /feed.xml. Or talk to us about a private release calendar for enterprise tiers.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.