Developers

Safeguard, in your dev loop.

Same engine in your IDE, your CLI, your CI, and your agents. Live findings, drafted fix PRs, low-friction guardrails.

Dev loop CI/CD Packages & libraries Developer resources

Dev loop

Where Safeguard lives in your dev loop.

The same engine, exposed in every surface you touch between idea and pull request. Live findings, drafted fix PRs, and guardrails that don't nag.

IDE Extension

VS Code, JetBrains, and Cursor. Live findings, one-keystroke fixes, no context switch.

Explore

CLI Tool

Scriptable Safeguard for the terminal — same checks locally, in CI, and in incident response.

Explore

MCP Server

Model Context Protocol endpoint your agents call. Real-time, signed, scoped to your tenant.

Open

Chrome Extension

Inline risk signals on GitHub, npm, PyPI, and package detail pages.

Explore

Slack App

Findings, approvals, and fix-PR reviews in the channel where work already happens.

Explore

Microsoft Teams

Adaptive cards for triage, approvals, and policy breaks — same flow, different chat.

Explore

Safeguard Code

Local coding agent that respects your repo conventions and your security policy.

Explore

Portal

The web console — dashboards, policies, evidence, audit, billing.

Explore

8 entries in Dev loop

CI/CD

Drop in wherever your pipeline runs.

A native step on every major CI, a single binary for the rest. Findings become required checks, fix PRs become routine.

Integrations

The full list of native connectors — SCM, CI, identity, observability, comms, and cloud.

Explore

GitHub Action

First-class step with annotations, status checks, and SARIF uploads.

Explore

GitLab CI

Include template for merge-request decoration and pipeline gates.

Explore

Azure DevOps

Pipeline task that fits both YAML and classic pipelines.

Explore

Bitbucket

Pipe integration with PR insights and required builds.

Explore

Jenkins

Declarative pipeline step, plus a classic plugin for older estates.

Explore

CircleCI

Pinned, signed orb. Reachability-aware checks in a single line of config.

Explore

Drone

Step plugin for Drone and Gitea Actions deployments.

Explore

8 entries in CI/CD

Packages & libraries

Pull Safeguard like any other dependency.

Public NPM org, public GitHub org, fully documented REST and SDKs. Everything you need to wire Safeguard into your own tools.

NPM Org

@safeguard-sh on npm — CLIs, SDKs, and reference clients, signed and provenance-attested.

Open

GitHub Org

Safeguard-sh on GitHub — open clients, action sources, examples, and issue tracking.

Open

API Reference

The full REST surface — auth, scans, findings, policies, webhooks, audit, exports.

Explore

Documentation

docs.Safeguard.sh — concepts, tutorials, recipes, and runbooks, kept in sync with releases.

Open

4 entries in Packages & libraries

Developer resources

Everything else worth bookmarking.

Concepts, tutorials, guides, and the roadmap. Built for engineers who would rather read the source than the slide deck.

Concepts & Glossary

The vocabulary — reachability, VEX, SLSA, attestations, policy gates, evidence.

Explore

Tutorials

End-to-end walkthroughs — first scan, first fix PR, first policy gate, first SBOM.

Explore

Guides

Opinionated how-tos for SCA, IaC, DAST, SBOM lifecycle, and AI-BOM programs.

Explore

Roadmap

What we're shipping next, what we're researching, and what we've scoped out.

Explore

Changelog

Every release, dated, with breaking changes called out. No silent rollouts.

Explore

For the Developer Persona

How Safeguard is designed around the way engineers actually ship — flow, not friction.

Explore

6 entries in Developer resources

Wire Safeguard into your stack.

Bring a repo and a CI provider — we'll get you from first scan to first merged fix PR on the call. No tier sheet, no pretend trial.

Read the docs