ESSCM: Enterprise SBOM Management at Scale
Managing SBOMs across hundreds of products requires more than file storage. ESSCM brings lifecycle management, versioning, and queryability to your software inventory.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Managing SBOMs across hundreds of products requires more than file storage. ESSCM brings lifecycle management, versioning, and queryability to your software inventory.
February 2026 at Safeguard: Lion behavioral baselines, Eagle base image advisories, Griffin reachability for Rust, and a new workflow editor.
The Gold Registry crossed 6,000 curated zero-CVE packages and images across ten ecosystems in February 2026 — and is now at 500K+. Here is what was in the original milestone, how it is built, and how to use it.
Griffin AI v2 brings multi-step reasoning, remediation generation, and deep organizational context to Safeguard's AI engine.
Lion 2.0 is Safeguard's compliance model. The 2.0 release adds multi-jurisdiction mapping, control-level evidence, and a new export for audit packages.
January 2026 release notes from Safeguard: Lion runtime attestations, Griffin cache sharing, self-healing workflows, and runner fleet mode.
Eagle 3.0 is the classification model behind Safeguard's package, image, and secret detection. Here is what changed, what moved, and what it means for alerts.
A full recap of Q4 2025 at Safeguard: Griffin for Java and .NET, Eagle attestations, Lion serverless, Gold policy-aware remediation, and more.
Griffin 3.0 is now generally available. Here is what changed in the reasoning and remediation model, how it behaves in practice, and the defaults you should know.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.