Safeguard
Supply Chain Security•

Private Search Engines and Browsers Compared: What Each One Collects

What DuckDuckGo, Startpage, Brave, Mojeek, Kagi, Firefox, Safari and Tor say they collect, compared from their own policies, plus how to switch defaults.

Safeguard Security Team
34 min read

Private search engines such as DuckDuckGo, Startpage, Brave Search, Mojeek and Kagi say in their own privacy policies that they do not tie your searches to your IP address or a profile, while Google's privacy policy lists "terms you search for" among the data it collects. Among browsers, Firefox, Brave, Safari and Tor Browser each document different defaults for telemetry, search suggestions and sync encryption, and none of them is private in every setting out of the box.

You can switch your default search engine in two to four taps or clicks on Windows, macOS, iOS and Android, and switch your default browser in the operating system's own settings. This guide compares each product only on what its own privacy policy and help pages say, quotes those documents briefly, and links every source at the end. It does not rank anything as "best", because the right choice depends on what you are protecting against.

Key takeaways

  • A search engine and a browser leak different things. The search engine sees your queries. The browser sees everything: every page, every form, every extension's activity. Changing only your search engine leaves the bigger data stream untouched.
  • "Private" search engines still receive your IP address. Their policies describe what they do after receipt: discard it, replace it with a country code, or never write it to disk. None of them can stop your internet provider from seeing which servers you connect to.
  • Most private search engines buy results or ads from larger providers. DuckDuckGo says ad clicks are handled by Microsoft's ad network; Startpage says it sends an anonymized query to its search and content providers and shows sponsored links from platforms such as Google AdSense.
  • Search suggestions are on by default in most browsers. Firefox's notice says suggestion requests, including your real time query, go to your search provider as you type. Safari's help page warns the search engine may record those terms.
  • Sync encryption differs a lot. Firefox Sync and Brave Sync are end to end encrypted according to their policies. Chrome sync is readable by Google unless you set an optional passphrase. Safari bookmarks are end to end encrypted only if you turn on Advanced Data Protection for iCloud.
  • Safe browsing checks talk to a third party. Firefox, Brave and Safari all use Google Safe Browsing in some form, and their policies describe how they limit what is shared.
  • Extensions are a supply chain inside your browser. An extension from an unknown publisher can see more than any search engine.

What does a search engine actually learn about you?

When you type a query and press Enter, your device opens an encrypted connection to the search engine's servers and sends:

  1. Your IP address. The network needs it to send results back. DuckDuckGo's policy says so plainly: it cannot prevent your IP address from being seen by your internet provider, its hosting provider, or providers in between.
  2. The query text. The whole point of the request.
  3. Request headers. Browser type, language, and often the operating system. DuckDuckGo's policy lists IP address, browser type and language as information your device sends automatically, with screen size, operating system and preferences sent on request.
  4. Cookies or local storage, if the site set any earlier.

What separates search engines is what happens next: whether the IP address is stored next to the query, whether queries are grouped into a per person history, whether that history feeds ad targeting, and how long logs live.

A second channel is easy to forget: search suggestions. As you type in the address bar, the browser can send your partial query to the search provider before you press Enter.

Private search engines compared by what their policies say

The table below summarizes each search engine's own privacy policy as fetched on 23 October 2026. "Not stated" means the policy we read did not address the point, not that the practice is absent. Google Search is included as the baseline most people are switching from.

CriterionGoogle SearchDuckDuckGoStartpageBrave SearchMojeekKagi
IP address stored with queriesPolicy lists IP address and search terms among collected dataSays it never logs IP addresses to disk that could be tied to youSays it does not record your IP address (except for blocking abusive bots)Says it stores no data that could link a query to a user, device or IPReplaces IP with a two letter country code in logsSays queries are not linked to an account; temporary debug logs for 7 days
Per person search historySaved to your account depending on history settingsSays it has no way to create a history of your queriesSays it does not log your searchesSays queries are not grouped by user, device or IPSays it does no user trackingSays search queries are not stored against your account
What it does keepActivity tied to account or browser identifiersAnonymous query trends to improve indexesTwo cookies: preferences (90 days) and security check (7 days)De-identified query text, platform, OS, country, language, dateIndefinite logs of time, page, referrer, country, browser infoBilling usage volume; debug logs on short retention
Business modelPersonalized advertising and servicesContextual search ads; ad clicks handled by Microsoft's ad networkNon-personalized sponsored links from platforms such as Google AdSenseSearch ads with aggregate measurement; optional paid ad free tierOwn ads product and search APIsPaid subscription
Account neededNo (optional)NoNo (optional for subscriptions)NoNoYes
Cookies by defaultYes, with unique identifiers when signed outAnonymous settings cookies onlyPreferences and security check cookiesSays nothing stored that could profile youNone unless you agreeOnly those needed for login and basic functions
Where results come fromOwn indexPolicy describes content providers; it calls content on your behalfSends anonymized query to search and content providersOwn index, optional Google fallback mixingNot stated in the privacy policyNot detailed in the privacy policy

A few points need more than a table cell.

Google Search: the baseline

Google's privacy policy is long and covers every Google service, so it is worth reading the parts that touch search. It lists the terms you search for as information collected, alongside IP address, unique identifiers, browser and device type, and the date, time and referrer URL of each request. When you are signed out, the policy says Google stores this information with unique identifiers tied to the browser, application or device. When you are signed in, your searches may be saved as history in your account, depending on your settings, and used for personalization and ads. You can pause or delete that history in your Google Account, but the default collection is broad by design, because personalized advertising is the business model.

DuckDuckGo

DuckDuckGo's privacy policy opens with a one line summary and then gets specific. The key commitment: "We don't save or share your search, chat, or browsing history." It says it does not save your IP address alongside searches, never logs IP addresses to disk in a way that could be tied back to you, and does not keep other unique identifiers with searches. For local results it says it sends a random nearby location rather than your precise one.

The company makes money from ads that match the query, not the person. If you search for cars, you see car ads. The policy says ad clicks are managed by Microsoft's ad network, and that Microsoft has committed not to associate ad click behavior with a user profile.

DuckDuckGo also ships its own browser on Mac, Windows, iOS and Android. Optional features such as Sync and Backup or Email Protection need limited personal information, and each has its own policy.

Startpage

Startpage, based in The Hague, describes itself as a layer between you and other search providers. Its policy says your query is stripped of your IP address and other identifying data, then sent in anonymized form to its search and content providers, and that "We don't log your searches." Sponsored links come from platforms such as Google AdSense, with some non-identifying system information shared to prevent click fraud.

Two features are worth knowing. Anonymous View loads a result page through Startpage so the destination site does not see your IP address. And the policy is explicit that once you click a normal result, you leave Startpage's protection; a YouTube result, for example, puts you under Google's privacy policy.

Brave Search

Brave Search runs its own index and says it stores de-identified query data: the query text, device platform, operating system, country, language and date. The important line is that "Search queries are not grouped based on the user, device or IP address". Anonymous local results use your IP address without storing it. Ads on Brave Search record clicks and views for measurement, with country inferred from IP and the IP not retained.

Two opt in features change the picture. Google fallback mixing, if you enable it, anonymously checks Google when Brave's own results fall short. Ask Brave, the AI answer feature, stores the conversation on servers in the United States for its duration, encrypted with a key on your device, and erases it after 24 hours of inactivity.

Mojeek

Mojeek Limited's policy is short and dated 2 February 2022, so check for updates before relying on it. It says Mojeek places no cookies unless you agree, and keeps standard logs indefinitely, but "IP addresses are not recorded"; instead it stores a two letter country code. The remaining log fields are time, page requested, possibly referral data and, in a separate log, browser information.

Kagi

Kagi is a paid search engine, so it needs an account and a payment method. Its privacy page addresses that head on: payment information is not used to link users to their search activity, and you can sign up with a pseudonymous email and authenticate anonymously with the Privacy Pass protocol. It states "we do not load any analytics or telemetry" on its site, and that it does not track which result you click. Search queries can appear in load balancer and VM logs kept for 7 days for debugging, not linked to an account; sampled error reports are kept for 90 days.

Kagi also makes the Orion browser, which its policy describes as zero telemetry by default.

Browsers compared by defaults, telemetry and sync

The browser matters more than the search engine, because it sees your whole session. The table compares what each browser's own documentation says about the defaults that affect privacy.

CriterionChromeFirefoxBraveSafariTor Browser
Default search engineGoogle in some countries; a choice screen in others (Chrome Help)Changeable at any time (privacy notice)Not covered in pages we fetchedChangeable in SettingsNot covered in pages we fetched
Search suggestionsOn by defaultOn by default; query sent to your search provider as you typeNot covered in pages we fetchedSearch engine suggestions setting; Apple warns terms may be recordedNot covered in pages we fetched
Usage telemetryGoverned by Google's privacy policyTechnical and interaction data on by default, can be turned off; separate Daily Usage PingPrivacy-Preserving Product Analytics, can be turned off in SettingsGoverned by Apple's privacy policyNot covered in pages we fetched
Sync encryptionReadable by Google unless you set a passphraseEnd to end encrypted (Mozilla accounts notice)Encrypted; key only on your devicesHistory and tab groups end to end; bookmarks end to end only with Advanced Data ProtectionNo sync
Built in tracker blockingNot described in pages we fetchedTotal Cookie Protection listed as a default featureShields, Brave's built in blockerIntelligent Tracking PreventionIsolates each site; clears cookies and history when you close it
Safe browsing providerGoogleGoogle Safe BrowsingGoogle Safe Browsing (OS or Safari service on mobile)Google Safe Browsing and Apple (Tencent in some regions)Not covered in pages we fetched
Sponsored contentNot covered in pages we fetchedSponsored New Tab content and suggestions in some regions, can be turned offBrave Ads, can be turned off per formatPrivacy Preserving Ad Measurement, can be turned offNone described
ExtensionsChrome Web Storeaddons.mozilla.orgNot covered in pages we fetchedApp StoreNot covered; extra add-ons work against its goal of uniformity

Chrome

Chrome's privacy behaviors are covered by Google's main privacy policy and the Chrome Help Center. Two things matter most.

First, sync. When you sign in to Chrome, bookmarks, passwords and other data are saved in your Google Account. Chrome Help explains that if your Chrome history is also added to Web and App Activity, it may be used to personalize other Google products such as Search. Chrome offers an optional sync passphrase that lets you use Google's cloud "without letting Google read it", though payment methods and addresses from Google Wallet are not covered by the passphrase. If you stay on Chrome, setting a passphrase is the single biggest privacy change you can make.

Second, Incognito mode is local only. Google's privacy policy says Incognito helps keep browsing private from other people using your device, but third party sites that integrate Google services still share information with Google when you visit them.

Firefox

Firefox's privacy notice is detailed and worth reading in full. Browsing history, form data and cookies stay on your device unless you sync them. Local AI features such as page translation run on small models downloaded to the device.

Defaults to review:

  • Search suggestions. "By default, Firefox shows Search Suggestions." Your real time query and technical data go to your search provider as you type. In the United States, Firefox also fetches "Suggestions from Firefox" from Mozilla's servers through an OHTTP proxy that hides your IP address, and some suggestions are sponsored. You can turn off either kind.
  • Technical and interaction data. Firefox collects usage and performance data by default to keep the browser working and to measure engagement. You can turn it off in settings; the separate Daily Usage Ping, which only says that a de-identified user is active, has its own opt out.
  • New Tab content. Sponsored stories and shortcuts may appear on New Tab, with data shared with advertising partners on an aggregated or de-identified basis. You can disable sponsored content without losing the rest.
  • Crash reports. On desktop and Android, Firefox asks before sending; on iOS they are sent automatically by default.

Sync is the strong point. The Mozilla accounts privacy notice says synced tabs, passwords, bookmarks, history and preferences are encrypted before they leave the browser and that "Mozilla cannot decrypt this information."

Brave

Brave is built on Chromium and blocks trackers and ads with Shields, its built in blocker. Its browser privacy notice covers several services:

  • Updates. Brave counts update requests to produce aggregate statistics, and says no individual can be identified from them.
  • Safe Browsing. On desktop, Brave uses Google Safe Browsing with locally stored URL hashes and sends only a partial hash when a site looks risky. On Android it relies on the operating system's Safe Browsing, which exposes your IP address to Google. On iOS it uses Safari's service, which Apple proxies.
  • Sync. Data is saved as an encrypted file on Brave's cloud host, and "Only you have access to the decryption key". Brave cannot recover it if you lose your devices, and unused sync chains expire after 12 months.
  • Product analytics. Brave sends anonymous, aggregated reports such as a range of how many tabs or extensions you have. You can turn this off in Settings.

Safari

Apple's Safari and Privacy notice describes these protections and settings:

  • Prevent Cross-Site Tracking periodically deletes tracking data from third party content providers you do not visit directly.
  • Hide IP Address can send traffic to known trackers through two relays run by different entities, so no single one sees both your IP address and the site. All users can choose Trackers Only; Private Relay subscribers can route all Safari traffic this way.
  • Fraudulent Website Warning sends information calculated from the address to Google Safe Browsing and Apple. Apple states "The actual website address is never shared with the safe browsing provider", though Google may log your IP address.
  • Webpage Translation sends the page contents to Apple; outside Private Browsing, the address is also kept for up to five years to improve products, not linked to your Apple Account.

For sync, Apple's iCloud data security overview shows Safari history and tab groups are end to end encrypted under standard data protection, while Safari bookmarks become end to end encrypted only when you turn on Advanced Data Protection.

Tor Browser

Tor Browser is in a different category. The Tor Project says it isolates each website so third party trackers cannot follow you, clears cookies and history when you finish, and relays traffic through three encrypted hops on a volunteer run network. It also "aims to make all users look the same", so anything that makes your copy stand out, such as extra extensions or unusual settings, works against that goal. Expect slower pages and more CAPTCHAs. It is the only browser here built to hide your IP address from the sites you visit by default.

Edge

Microsoft Edge is the default browser on Windows. Its help page says Bing is the default search engine and that you can switch to any engine that supports OpenSearch. We did not review Edge's privacy statement, so it is not in the table.

Which combination fits your threat model?

There is no single "best" pairing. Decide what you are trying to stop, then pick tools whose documented defaults match.

What you want to reduceWhat actually helpsWhat does not help on its own
Your searches feeding an ad profileA search engine whose policy says it does not store queries with IP or identifiers, and turning off address bar suggestions you do not needPrivate or Incognito windows
Cross-site tracking while browsingA browser with tracker blocking on by default, kept up to dateChanging only the search engine
Your cloud provider reading synced dataEnd to end encrypted sync, or a sync passphrase in ChromeStrong account password alone
Sites learning your IP addressTor Browser, or a relay feature such as Safari's Hide IP Address for trackersPrivate search engines, which still see your IP
People with access to your devicePrivate windows, a device passcode, and clearing historyAny search engine choice
Your employer seeing traffic on a managed deviceNothing in the browser; the device is managedAny of the above

How to change your default search engine, step by step

Every step below comes from the official help page of the browser or operating system, linked under Sources. Menus change between versions, so if a label differs slightly, look for the nearest match.

Chrome on Windows, macOS and Linux

  1. Open Chrome.
  2. At the top right, select More (the three dots), then Settings.
  3. Under "Search engine", select Change.
  4. Pick a new default search engine.

To add an engine that is not listed, go to Settings, then Search engine, then Manage search engines and site search. Next to "Site search", select Add, enter a name, a shortcut, and the results page URL with %s where the query goes. For example:

Name:     Example Search
Shortcut: ex
URL:      https://search.example.com/search?q=%s

Then open the More menu next to the entry and select Make default. Chrome Help notes that if your search engine changes unexpectedly, or will not stay changed, you may have malware, and that on a work or school device an administrator may lock this setting.

Chrome on Android

  1. Open Chrome.
  2. At the top right, tap More, then Settings.
  3. Under "Basics", tap Search engine.
  4. Select the engine you want. Recently visited search engines appear as options, so visit the engine's site once first if it is missing.

Chrome on iPhone and iPad

  1. Open Chrome.
  2. Tap More, then Settings, then Search engine.
  3. Select the engine you want.

Safari on Mac

  1. In Safari, choose Safari, then Settings, then click Search.
  2. Choose a search engine for regular browsing.
  3. Choose a separate Private Browsing search engine if you want one.
  4. Consider unticking Include search engine suggestions. Apple's own wording for that setting: "The search engine may record your search terms."
  5. Review Include Safari Suggestions, which pulls suggestions from Apple services as you type.

Safari on iPhone and iPad

  1. Open the Settings app.
  2. Tap Search, then tap Search Engine.
  3. Tap the engine you want.

Safari's list is fixed. You cannot add an arbitrary engine through Settings on iPhone; if yours is not listed, use its own app or browser, or set a different default browser.

Microsoft Edge

  1. Run one search in the address bar using the engine you want, so Edge discovers it.
  2. Open Settings and more, then Settings.
  3. Select Privacy, search, and services, then Search and connected services, then Address bar and search.
  4. Choose your engine from Search engine used in the address bar.

Firefox

Firefox's privacy notice says you can turn off search suggestions or change your default search provider at any time, and links to Mozilla's support article for desktop, Android and iOS. Follow that article for your platform; we could not retrieve its text in a form we could quote for this post, so we are not reproducing its menu labels.

Brave

Brave is built on Chromium, and its search settings follow the same pattern as Chrome's: a default engine picker plus a list of site search shortcuts you can add to. We did not fetch Brave's help article on this, so check Brave's help center for the current labels rather than relying on our description.

How to change your default browser on each operating system

Changing the search engine inside a browser does not change which browser opens when you click a link in email or chat. That is an operating system setting.

Windows 11

From Microsoft Support:

  1. Open the Settings app and select Apps, then Default apps.
  2. Under Set defaults for applications, search for and select the browser you want.
  3. Next to Make ... your default browser, select Set default.
  4. Chrome Help adds a useful check: review the list under Set default file types or link types so each web file and link type points to the browser you chose.

Google's Chrome Help gives the same path for Chrome on Windows 11, and the older Windows 10 path: Settings, then Apps, then Default apps, then choose your browser under Web browser.

macOS

From Apple Support, on macOS Ventura 13 or later:

  1. Install the browser you want.
  2. Open the Apple menu, then System Settings.
  3. Click Desktop & Dock in the sidebar.
  4. Scroll down and choose a browser from the Default web browser menu.

On earlier versions, choose System Preferences from the Apple menu and use the same Default web browser menu.

iPhone and iPad

From Apple Support, on the latest iOS or iPadOS:

  1. Open Settings, then tap Apps.
  2. Tap Default Apps at the top of the list.
  3. Tap Browser App and choose the browser you want.

Android

Steps vary by manufacturer. Google's Pixel Help page describes the Pixel and stock Android flow on Android 14 and later:

  1. Open the Settings app.
  2. Tap Apps, then Default apps.
  3. Tap the default you want to change, such as the browser, then tap the app you want to use.

To stop an app from opening links by default, go to Settings, then Apps, select the app, and use Open by default. On phones from other manufacturers, check that manufacturer's help pages for the exact labels.

Settings to change after you switch

Switching the defaults is half the job. These follow up steps come from the same policies.

  1. Decide on search suggestions. If you do not want each keystroke sent to your search provider, turn suggestions off in Chrome, Firefox or Safari. Firefox lets you separate provider suggestions from Firefox's own.
  2. Turn off sponsored suggestions and New Tab ads you do not want. Firefox and Brave both document how.
  3. Review telemetry. Turn off Firefox's technical and interaction data, or Brave's Privacy-Preserving Product Analytics, if you prefer to send nothing.
  4. Encrypt sync. In Chrome, set a sync passphrase. On Apple devices, consider Advanced Data Protection, after setting up a recovery contact or recovery key as Apple requires.
  5. Clean up old history. Switching search engines does not delete what Google already saved. Review Search history and Web and App Activity in your Google Account.
  6. Keep safe browsing on. Firefox, Brave and Safari each document how they limit what is shared with the safe browsing provider. Turning it off removes a real protection against phishing pages.

Extensions: the part of your browser you did not write

Browser extensions deserve their own section. An extension with permission to read and change data on all websites sees everything the browser sees, including pages you never searched for. Apple's Safari notice says it directly: when you use third party extensions you are subject to those parties' terms and privacy practices.

That makes an extension store a software supply chain. The extension you installed two years ago may have changed owners, added analytics, or shipped an update that requests new permissions. We have written about this in browser extension security risks for developers, how the browser extension permission model works and malicious browser and IDE extensions.

Practical rules:

  • Install as few extensions as possible. Each privacy browser in this article already blocks trackers natively.
  • Restrict site access to "on click" or specific sites where the browser allows it. Safari lets you choose which sites each extension can read and modify.
  • Re-check permissions after updates. A new "read all sites" prompt is a reason to stop and look.

The same leak, one level up: AI agents that search for you

If you use an AI assistant or coding agent that searches the web on your behalf, your query goes to whatever search backend the agent uses, often with more context than you would type yourself: file names, error messages, internal project names. Changing your browser's search engine does nothing for that traffic. We covered the details in how AI agent web search leaks your data to search engines.

Where Safeguard fits, honestly

Safeguard does not replace a search engine or a browser, and it does not inspect your browser extensions. It secures the software supply chain of the code your team builds and ships: it scans repositories, container images and SBOM files for vulnerable open source components, shows which projects contain a given component and version, ranks findings with reachability analysis, and can open fix pull requests. The browser and extensions on your machine are third party code you trust with your data; the dependencies in your application are third party code your customers trust with theirs. Both deserve an inventory, a reason for every item, and an update path.

Common mistakes

  1. Switching the search engine and stopping there. The browser, its sync and its extensions still see far more than the search engine does.
  2. Assuming a private search engine hides your IP. Their policies describe not storing your IP. They still receive it, and so does your internet provider.
  3. Treating Private or Incognito mode as anonymity. Google's policy and Apple's notice both describe these modes as keeping history off your device, not hiding you from sites.
  4. Leaving search suggestions on without thinking. Firefox's notice and Apple's help page both describe keystroke level queries going to the provider.
  5. Turning on cloud sync without checking the encryption model. Chrome sync without a passphrase, and Safari bookmarks without Advanced Data Protection, are readable by the provider.
  6. Installing a "privacy" extension from an unknown publisher. It may see more than the services it claims to block.
  7. Disabling safe browsing for privacy. Brave and Safari describe hash based or proxied checks. Turning them off trades a small, documented disclosure for real phishing exposure.
  8. Ignoring managed devices. Chrome Help notes administrators can set the default engine. On a work device, your employer's policies apply regardless of what you pick.

FAQ

What is the most private search engine?

There is no ranking that holds for everyone. Read the policies on the criteria that matter to you: DuckDuckGo, Startpage, Brave Search and Mojeek each say they do not store queries with your IP address, and Kagi says queries are not linked to your account. Startpage relays queries to other providers; Brave Search describes its own index; Kagi requires a paid account.

Do private search engines really not track you?

Their policies say they do not keep your IP address alongside your queries and do not build per person histories. Those are commitments, not something you can verify from outside. They still receive your IP address with each request, and ad clicks or result clicks can hand data to third parties.

Does Startpage use Google results?

Startpage's policy says it sends your anonymized query to its search and content providers and that sponsored links come from platforms such as Google AdSense. It says your IP address and identifying information are stripped before the query is sent.

Is Firefox more private than Chrome?

On sync, yes by default: Mozilla's accounts notice says Firefox Sync is end to end encrypted, while Chrome sync is readable by Google unless you set a passphrase. Both send search suggestions by default and both collect usage data, which Firefox lets you turn off.

Is Brave browser safe to use?

Brave documents tracker blocking by default, encrypted sync with keys only on your devices, Google Safe Browsing for known bad sites, and opt out product analytics. Like any browser, keep it updated, since Brave says it checks for updates automatically.

How do I change my default search engine on iPhone?

Open Settings, tap Search, then tap Search Engine and choose one. This applies to Safari. Other browsers on iPhone, such as Chrome, have their own search engine setting.

How do I make a browser my default on Android?

On Pixel and stock Android 14 and later, open Settings, tap Apps, then Default apps, then Browser app, and choose your browser. Other manufacturers use similar but not identical labels.

Does private browsing mode stop my internet provider seeing what I do?

No. Private modes stop the browser saving history on your device. Your internet provider, your employer's network, and the sites you visit still see traffic as normal. Only tools that relay your traffic, such as Tor Browser, change what the network sees.

Will switching search engines delete my Google search history?

No. Your past searches stay in your Google Account until you delete them. Review Search history and Web and App Activity in your Google Account settings after you switch.

Fix it without waiting for upstream

Browser privacy is a reminder that third party code holds a lot of trust. In your own applications, that third party code is your open source dependencies, and when one of them has a known vulnerability, you do not have to wait for someone else's release schedule to deal with it.

Whatever the vulnerability, most of the risk sits in two gaps. The first is the time between a fix being published and that fix actually running in your production builds. The second, and worse, is the time before any fix exists at all, while a maintainer works out a patch and a release schedule. Waiting through both gaps is a habit, not a requirement. Safeguard gives teams three ways to close them.

1. Autonomous remediation: pull requests, not tickets

When a fixed version exists, Safeguard's Griffin models open a tested, policy gated pull request that moves the affected dependency to the safe version. You can run it on one repository or in bulk across every project that carries the vulnerable version. Remediation covers eight categories, including dependencies, licenses, security posture and findings. Reachability analysis ranks the vulnerable code paths your application actually calls first, so the first pull requests you merge are the ones that matter most. Autonomous remediation ships switched off, with every category set to Manual, so your team decides how much runs on its own and what still needs a human approval.

2. Gold Open Source: the safe version in seconds, free

gold.safeguard.sh is free and needs no login. Search any CVE or package to see affected and fixed versions, CVSS, EPSS, CISA KEV status and a recommended safe version, or use the "Am I affected?" checker. The same data is available through a free read API, README status badges and RSS threat feeds. The safeguard-sh/gold-scan-action GitHub Action can fail a build on a known exploited vulnerability, on any known vulnerability, or never, so a version you have just removed cannot quietly come back in next week's merge.

3. Gold Registry: start from components that are already fixed

registry.safeguard.sh provides hardened, drop in replacements for upstream packages and container images. Every Gold artifact is held continuously to zero exploitable critical or high CVEs, zero malware and a completed license check, with SLSA L3 or higher provenance, a Sigstore signature and a public evidence page you can hand to an auditor. An artifact loses its Gold badge if it regresses. Teams can point their own package directory at the registry so hardened equivalents resolve without changing how developers install anything.

When upstream has no fix yet, or will not ship one, Safeguard first works to get the fix accepted upstream. If the issue is severe or upstream will not move, Safeguard builds a fork, fixes the vulnerability there and publishes a hardened Gold build, so you are not stuck on a maintainer's release schedule. You can also request a hardened, compatibility tested build of a specific package. This fork and patch flow is in early access today, so ask which packages it covers before you plan around it.

Your situationWhat to use
A fixed version existsAutonomous remediation opens the upgrade pull request; Gold Open Source confirms the safe version
You need to know today whether you are affectedGold Open Source lookup and "Am I affected?" checker, free and without login
You want vulnerable versions to stop shippingThe Gold scan GitHub Action in CI, plus Safeguard policies and gates
Upstream has no fix yet, or will not ship oneA custom Gold request; fork and patch (early access)
You want to start clean on new projectsPull hardened components and images from Gold Registry

One honest limit: when the vulnerable code lives in a vendor appliance, a hosted service or an operating system runtime you do not build yourself, the fix still has to come from that vendor or distribution. The steps above apply to the open source dependencies and container images you build and ship, which is where most teams carry the largest and least tracked share of their exposure.

See how Safeguard would help

None of these demos change your browser or search engine. They show the developer side of the same idea: knowing what third party code you run and keeping control over what software does on your machine. If you want to try the CLI, download it from https://safeguard.sh/download and read the setup guide at https://docs.safeguard.sh/docs/cli .

The first demo is a real CLI session. After install, safeguard opens the interactive terminal, you ask it to fix the lodash CVE in a repo, and it reads the finding and advisory, asks before each command, edits package.json to lodash 4.17.21, runs npm install and npm test with your approval, prints a summary and pushes nothing. It is the same principle as choosing a browser with clear defaults: the tool tells you what it is about to do and waits for your yes.

Click through it at your own pace, or open it full screen.

The second demo sets up the Safeguard runner on your own machine, approves it with its device code, and then scans from the terminal. If you care where your data goes, this is the relevant flow: dependency inventory and vulnerability checks run locally on a machine you control.

Click through it at your own pace, or open it full screen.

The third demo connects Claude to the Safeguard MCP server with OAuth and lets you choose which tools Claude can use. As with extension permissions in a browser, the point is granting an assistant exactly the access you intend and nothing more.

Click through it at your own pace, or open it full screen.

Quick check

If you switch to a private search engine but keep search suggestions on in your browser, who sees what you type?

Your chosen search engine. Firefox's privacy notice says suggestion requests, including your real time query, go to your search provider as you type, and Apple's Safari help says the search engine may record those terms. Switching engines changes who receives them; turning suggestions off stops the keystroke level requests.

Which browser sync setups in this article keep the provider from reading your data by default?

Firefox Sync and Brave Sync, according to their own policies, encrypt data with keys only on your devices. Safari history and tab groups are end to end encrypted under standard iCloud protection, but bookmarks need Advanced Data Protection. Chrome sync needs an optional passphrase.

Sources

Last reviewed: 23 October 2026. Privacy policies and settings menus change often; check each linked policy and help page for the current version.

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.