Product
What Safeguard Does Today: Every Capability, Labelled GA
Safeguard's SBOM, SCA, reachability, fix PRs, policy and compliance are GA, and so are Trust Center, AI security, SAST and DAST. The full list.
Oct 23, 202637 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedProduct
Use Gold Open Source in Your Workflow: Free API, Badges, RSS, CI Gate
Gold Open Source is free with no login. Check CVEs, EPSS, KEV and safe versions, then wire its read API, badges, RSS feeds and CI gate into your workflow.
Oct 23, 202639 min read
Product
Supplier Software Risk Under DORA, NIS2 and M-26-05, With Safeguard TPRM
DORA, NIS2 and US federal policy want supplier risk judged on evidence. Safeguard TPRM (GA) tiers vendors, requests SBOMs, scores risk and monitors them.
Oct 23, 202639 min read
Product
Setting Up a Safeguard Trust Center, Step by Step
Open Compliance › Trust Center, set your slug, name and contacts, choose frameworks and live controls, gate reports behind NDA requests, then publish.
Oct 23, 202642 min read
Product
SBOM Generation and Analysis in Safeguard: NTIA Elements to the CRA
Safeguard builds SPDX and CycloneDX SBOMs from repos, CLI scans, manifests and images, checks NTIA elements and keeps them current for CRA work.
Oct 23, 202640 min read
Product
Safeguard in Your IDE, Claude's Connector Directory and ChatGPT
Safeguard brings findings into VS Code, Cursor and JetBrains, and into Claude and ChatGPT over MCP with OAuth sign-in and tools an admin turns on.
Oct 23, 202642 min read
Product
Safeguard DAST Scope: Verified Targets, What It Finds, What It Skips
Safeguard DAST only tests targets you prove you own, inside an allow-listed scope, with safe requests. Here is what it returns and skips.
Oct 23, 202642 min read
Product
Repo Connection, CLI or Local Runner: How Safeguard Touches Your Code
Connect a repo and Safeguard clones it to scan; with the CLI or local runner, only SBOMs and findings leave your machine. Choose by data class and policy.
Oct 23, 202640 min read
Product
Gold Registry Evidence Pages: What the Gold Bar Proves to an Auditor
A Gold Registry evidence page records one artifact's CVE, license, provenance and signature state. What it proves to an auditor, and how to verify it.
Oct 23, 202642 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.