Safeguard
Application Security•

The Safeguard Chrome extensions: Griffin side panel and Gold lookups

Two Chrome extensions: one opens Safeguard search in a side panel, the other looks up packages in Gold. What each does and how to install them.

Safeguard Security Team
Updated 2 min read

You are reading a README, a pull request or a vendor blog, and you want to know if a package is safe. Leaving the page to search somewhere else breaks your flow. Safeguard publishes two Chrome extensions so the answer opens next to the page you are on.

What it is

Safeguard opens the Griffin search side panel. Click the toolbar icon and a panel opens beside the current page, loaded with the same AI search you get in the web app. You sign in inside the panel the way you would in a browser tab.

According to the documentation, the extension is deliberately thin. It embeds the production search page and does little else. It asks for one browser permission, the side panel API, and no host permissions, so it cannot read the pages you browse.

Gold Open Source does package lookups. Gold is Safeguard's open source registry at gold.safeguard.sh, and the extension brings that lookup into the browser.

How to use it

  1. Open the Safeguard listing on the Chrome Web Store, click Add to Chrome and confirm.
  2. Pin the Safeguard icon to your toolbar.
  3. Click it. The side panel opens. Sign in if asked.
  4. Ask a question in plain language, such as which of your projects have critical findings.
  5. Repeat for Gold Open Source if you want package lookups from any page.

A tenant admin can switch off browser extensions as a client type for the whole team.

Try it yourself

Pick a package from a README you are reading right now. Look it up with Gold Open Source, then ask the Griffin panel what you should know before adding it. For a no-install check, the free scan at gold.safeguard.sh/scan runs in your browser and accepts up to 100 dependencies.

Quick check

Which permission does the Safeguard extension request?

Just the side panel permission, with no host permissions.

Sources

Never miss an update

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.