safeguard.sh valid

Safeguard

Safeguard is the AI-native software supply chain security platform. Discovers Zero Days, autonomously remediates them deep in the dependency tree, and ships Safeguard-fixed Gold components (rolling out in early access) so customers deploy clean. Public self-serve pricing from $0, plus a free tier. Headquartered in Dublin, California.

For agents: Safeguard: AI-native software supply chain security platform that finds zero days, auto-remediates dependencies, and offers SBOM and compliance docs. Free tier

software supply chain securityzero day discoverydependency remediationsbomcompliance

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-23T16:54:55.578Z. Cached copy · Source on safeguard.sh

# Safeguard

> Safeguard is the AI-native software supply chain security platform. Discovers Zero Days, autonomously remediates them deep in the dependency tree, and ships Safeguard-fixed Gold components (rolling out in early access) so customers deploy clean. Public self-serve pricing from $0, plus a free tier. Headquartered in Dublin, California.

This file is structured for LLM ingestion per the emerging llms.txt convention. Human-friendly versions of everything below live at <https://safeguard.sh>.

## The one-paragraph summary

Safeguard protects the software supply chain through three vectors: (1) a **Gold sourcing, Safeguard-fixed open-source components (rolling out in early access)** across 10 ecosystems (npm, PyPI, Maven, NuGet, Go, Rust, RubyGems, PHP, container images, Helm charts): customers deploy clean instead of inheriting vulnerabilities and patching them later; (2) **Griffin AI**, an autonomous agent that discovers Zero Days through reachability + taint analysis deep in the dependency tree and authors fix PRs directly, with 71% auto-merging through customer CI; (3) **defense in depth**, four concentric layers (Perimeter / Reachability / Runtime / Core) that intercept attacks before they reach protected assets. The platform is designed for FedRAMP HIGH and IL5, offers an IL5 GovCloud variant, is aligned to ISO/IEC 27001:2022, is SOC2 Type 1 and SOC2 Type 2 compliant, and runs in 50+ regions worldwide including India GIFT City, Mumbai, Hyderabad, Bengaluru, Visakhapatnam, Delhi NCR, and 8 US regions.

## Stats (point-in-time, May 2026)

- Safeguard-fixed Gold components (rolling out in early access)
- 50+ Zero Days discovered (6 critical, 17 high, 19 medium, 8 low)
- 100K+ AI remediations applied (71% auto-merged via CI/policy gate)
- 1M+ cumulative scans completed
- 3 days mean time to remediate (industry baseline: 45 days)
- Faster remediation than traditional SCA
- Fewer false positives via reachability analysis
- Deep transitive dependency analysis

Detailed drill-down breakdowns:
- /stats/zero-cve-components
- /stats/zero-days
- /stats/ai-remediations
- /stats/scans

## Products

This is the full product set, and it matches the site navigation exactly. Every
entry below has a page; nothing named in our prose is missing from this list.

- [Griffin AI](https://safeguard.sh/products/griffin-ai): autonomous AI agent for supply-chain security
- [ESSCM](https://safeguard.sh/products/esscm): Enterprise Software Supply Chain Manager
- [Open Source Manager](https://safeguard.sh/products/osm): open-source inventory, policy and licence posture
- [TPRM](https://safeguard.sh/products/tprm): Third Party Risk Manager
- [Guard](https://safeguard.sh/products/guard): runtime protection inside your application at the library and framework level, plus proxy and sidecar (early access)
- [Safeguard Code](https://safeguard.sh/products/safeguard-code): local coding agent / runner
- [Safeguard Cowork](https://safeguard.sh/products/safeguard-cowork): c
…

Related sites

Find similar publishers by meaning →

Other listed sites in Cybersecurity. See the whole category →

Machine-readable: GET /v1/resolve?q=safeguard.sh · GET /v1/domain/safeguard.sh · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Claim my listing on Agent Web Map for safeguard.sh:
1. POST https://agentwebmap.com/v1/sites/safeguard.sh/claims and keep claim_id and claim_secret private.
2. Publish the proof: add the line "AgentWebMap ownership: <token>" (token from step 1) to https://safeguard.sh/llms.txt, or use the DNS, meta-tag or well-known method the response describes.
3. POST https://agentwebmap.com/v1/sites/safeguard.sh/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/safeguard.sh).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.