Safeguard
Procurement · Cloud Marketplaces

Buy Safeguard on the cloud bill you already have.

The slowest part of buying security software is usually not the software. It is procurement. Purchasing through a cloud marketplace reuses a vendor relationship your organisation has already approved — the spend is committed, the vendor is cleared, and the invoice is one you already reconcile.

Same platform, different paperwork.
Marketplace and direct purchases run identical software. Only the billing path changes.
◈ the drill — buy through the cloud you already buy from
9
Listings Live Now
AWS + Microsoft
Live Today
Private Offers
Custom Terms
Committed Spend
Drawdown Eligible
Why buy here

The software is the easy part. Procurement is the long pole.

Draw down committed spend. A marketplace purchase counts against your existing AWS or Google cloud commitment, so the budget is already approved.
Skip vendor onboarding. Your cloud provider is already an approved vendor. Legal, procurement and security review have been done once, for them, not again for us.
One bill, one renewal. Safeguard appears as a line on the cloud invoice you already reconcile — no separate PO, no separate payment terms, no separate renewal date to track.
The same product either way. Marketplace and direct purchases run identical software on identical infrastructure. Buying through a marketplace changes the paperwork, not the platform.
Where you can buy

Every listing, with its real status.

Every link below was confirmed by loading the page, not by searching — marketplace search indexes hours to days behind a listing going live, so it reports nothing for listings that are demonstrably there. Anything still in review is listed and labelled without a link: we would rather tell you it is not ready than send you somewhere that cannot sell you anything. Note the Microsoft listings are free to get rather than transactable, so they do not draw against an Azure commitment as they stand.

AWS Marketplace

Two listings public and subscribable today. Committed-spend drawdown and private offers supported.

Available
View our AWS Marketplace seller profile
Safeguard Portal: SBOM Management, Sharing, VEX and NTIA Compliance

Generate, store, share and attest SBOMs. VEX authoring, NTIA minimum-elements conformance, and buyer-facing distribution.

Safeguard Gold Directory: Free Open Source Package and CVE Lookup

Free. Look up any open-source package, its known CVEs, fix versions and maintenance signals.

Twenty-one further listings, by private offer

ESSCM, TPRM, OSM, AppSec, Compliance, AI Governance, Zero-Day, Platform, Self-Hosted and more exist as Limited listings: not publicly searchable, reachable by direct link or private offer. Ask and we will raise one.

Google Cloud Marketplace

Solution Validation approved; in technical integration. Not yet purchasable — procure on Google paper today by private offer.

In review
View our Google Cloud partner profile
Safeguard ESSCM — Enterprise Software Supply Chain Management

The flagship listing: SBOM, provenance, SLSA attestation and supply-chain posture.

Safeguard TPRM — Third-Party Risk Management

Vendor risk, questionnaires and continuous monitoring.

Safeguard OSM — Open Source Management

Licence obligations, dependency health and open-source policy enforcement.

Safeguard Portal

The free entry point, and the trial call to action inside the ESSCM listing.

Oracle Cloud

Runs on OCI today. No marketplace listing — purchase is direct or by private offer.

In progress
Safeguard on Oracle Cloud Infrastructure

Deploy against OCIR, OKE and OCI DevOps, with OCI Vault and IAM, including sovereign and in-region topologies. Available today as a deployment target.

Oracle Cloud Marketplace listing

Not listed. Oracle does not currently transact SaaS entitlements on its marketplace, so an Oracle purchase is contracted directly or by private offer rather than metered through the storefront.

How it works

Subscribe on the marketplace, land in your tenant.

1 · Subscribe. Choose the listing on your cloud marketplace and accept the terms. Your cloud provider handles the contract and the billing.
2 · Hand off. The marketplace passes you to Safeguard with a signed, single-use token. We verify it server-side before anything is created — it never touches your browser.
3 · Set up your tenant. Create your account, or link the purchase to an existing tenant. The entitlement attaches to your organisation, not to one person.
4 · Stay in sync. Plan changes, renewals and cancellations flow from the marketplace to your entitlement automatically. What you are billed for and what you can use never drift apart.
Deployment

A marketplace purchase does not decide where Safeguard runs.

Billing path and deployment shape are independent choices. You can buy on AWS Marketplace and run dedicated in your own VPC, or buy direct and run shared. The one real constraint is metering, and it is a physical one — see below.

Shape
What it means
Billing
Shared cloud
Multi-tenant SaaS, run by us. Fastest to start, nothing to operate.
Metered or flat
Dedicated cluster
Your own isolated cluster and database, still operated by us.
Metered or flat
VPC-isolated
Inside your cloud account and network perimeter, with egress under your control.
Metered or flat
Sovereign
In-country infrastructure for data-residency and national-cloud requirements.
Metered or flat
Self-hosted / on-premises
Your Kubernetes, your hardware, your operators. Connected to the internet for updates.
Flat or capacity
Air-gapped
No inbound or outbound network path. Updates and feeds delivered as signed offline bundles.
Fixed term
Metering

Usage-based billing, reported hourly to your cloud.

Metered plans report to the marketplace, not to us. Usage is submitted on a schedule to your cloud provider's metering API — AWS BatchMeterUsage, Google Service Control, Azure Marketplace Metering — and your cloud bills you. We never issue a separate invoice for a metered plan.
Every usage record is reported exactly once. Each record carries a deterministic operation id, so a retried submission is recognised by the marketplace as the same event rather than billed twice. A network failure on our side costs you nothing.
Flat and free plans are not metered at all. A fixed-price subscription reports no usage. Safeguard Portal and the Gold Directory are free entry points with nothing to meter.
Cancel on the marketplace, and it takes effect. Cancellation, suspension and plan changes propagate from your cloud provider to your entitlement. You are never still being served after you have stopped paying, and never charged for a tier you have left.
Air-gapped cannot be metered — by definition. An isolated deployment has no path to a metering API, so air-gapped and disconnected on-premises installations are licensed on fixed-term or capacity terms rather than usage. This is a property of the network, not a policy choice.
Private offers

Need it on a marketplace that is not live yet?

A private offer can be raised on AWS Marketplace for any Safeguard product, including ones without a public listing, with the pricing and term negotiated for you. If your organisation buys through Google Cloud or Azure and needs Safeguard on that paper specifically, tell us — the demand is what decides which listing we push through review next.

Buying through your cloud?

Private offers, committed-spend drawdown and reseller terms — sales@safeguard.sh.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.