Safeguard
Product•

What does the Safeguard Firefox add-on do?

The Safeguard Firefox add-on opens a sidebar where you ask supply chain questions about your account. What it answers, what it reads and what it needs.

Safeguard Security Team
4 min read

The Safeguard Firefox add-on puts Safeguard's AI search in a browser sidebar, so you can ask about findings, severity, affected projects and compliance posture without leaving your current tab. It is listed on addons.mozilla.org, published by Safeguard.sh Inc., and it requires a Safeguard account.

This post sticks to what the Firefox Add-ons listing, the download page and the browser extension docs say. Where those pages differ in emphasis, we say so.

What is it, in one sentence?

A sidebar. The docs describe the extension as a thin wrapper that embeds Safeguard's AI search page in a side panel in Chrome and Edge, and a sidebar in Firefox. It does nothing beyond that. A toolbar icon titled "Open Safeguard" opens it beside the page you are on.

What can you ask it?

The listing says answers are account based. Examples it gives:

  • Open findings and their severity
  • Which projects are affected
  • How a CVE affects the version you shipped
  • Your compliance posture

Because the sidebar is the same search page you would use in a normal tab, your answers come from your own organization's data, not from a generic model guess.

What carries over from the web app?

Conversations are persistent. The listing says threads are saved and shared with the Safeguard web app, so a question you start in Firefox can be picked up at app.safeguard.sh. You can also attach a file or a screenshot to a question.

Can it read the page you are on?

Yes, when you ask it to. The listing says you can attach the current tab as context, and that the sidebar reads the page only when you ask and clicks nothing. That fits a common use: you are reading a package page or an advisory, and you want to ask what it means for your projects.

How does sign-in work?

You approve the browser from your Safeguard account, in a flow the listing compares to the Safeguard CLI. No password is typed into the extension, and signing out revokes the session. The docs add that the extension has no separate login of its own and stores no credentials.

Which Firefox versions?

The docs list Firefox 113 and later. The listing shows version 1.0.4, last updated 13 October 2026, at about 226 KB.

What it is not

The docs scope it as AI search only. If you want scanning inside your editor, the docs point you to the IDE extensions instead. It does not replace the CLI, the pipeline gate or the web app.

How is it different from the Chrome and Edge version?

The docs describe the same idea in each browser: a thin wrapper around Safeguard's AI search page. Chrome and Edge show it in a side panel and Firefox in a sidebar. Firefox's feature list is spelled out on the listing, including attaching the current tab and files. Whether every item applies identically in Chrome and Edge is not stated in the pages we read, so test in the browser you use.

What to do

  1. Install the add-on from the official addons.mozilla.org listing linked from the download page.
  2. Open the sidebar and approve the browser from your Safeguard account.
  3. Ask one question you already know the answer to, such as the severity of a finding you triaged last week.
  4. Attach the current tab on a page you care about and check the reply makes sense.
  5. Decide whether to allow the optional all-websites access the listing mentions. Read the limits post in this series before you do.

Quick check

Do I need a Safeguard account to use the Firefox add-on?

Yes. The listing says it requires a Safeguard account, and sign-in is an approval from that account.

Is the Firefox add-on a code scanner?

No. The docs describe it as AI search only. Code scanning is handled by the IDE extensions, the CLI and the web app.

Sources

Last reviewed: 18 October 2026.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.