The Safeguard Firefox add-on opens Safeguard's AI search in a sidebar beside whatever page you are on. It is for people who already have a Safeguard account and want to look up a package, a CVE or a finding without leaving the tab. It is thin by design and asks for no host permissions.
Everything here comes from the Safeguard download page and the browser extension documentation at docs.safeguard.sh, read on 18 October 2026.
What does it do?
Click the toolbar icon, titled Open Safeguard, and Firefox opens a sidebar. In Chrome and Edge the same idea is a side panel. The sidebar loads the same AI search experience you get in the web app at app.safeguard.sh under the search page.
The docs describe the extension as intentionally thin. It embeds the production search page and nothing else. There is no separate login flow, no credential storage in the extension and no direct API calls from the extension code. You sign in inside the embedded page exactly as you would in a browser tab, and the sidebar carries that session.
Where do I get it?
The download page lists it under browser extensions, published by Safeguard.sh Inc, with a Firefox entry that opens the Firefox Add-ons site. The documentation says the official builds are on Firefox Add-ons and that Firefox 113 or later is required. Chrome and Edge need version 114 or later.
The same page lists a Safari extension. On iPhone and iPad it is included in the Safeguard app, and you switch it on in the Safari extension settings on the device. The page says the Mac version was in Apple review when we read it, so we do not describe it as available.
What access does it ask for?
According to the docs, the Firefox manifest uses the sidebar action and declares no host permissions. It also states in its manifest settings that it collects no data, under the field Mozilla uses for add-on listings. The docs show the manifest excerpt so you can check it yourself.
That means the add-on does not read the pages you browse. It cannot intercept requests to app.safeguard.sh or other sites beyond what the embedded page does itself.
One caveat appears in the FAQ. The web app's session cookie uses a setting that browsers may refuse to send inside an embedded frame, so some people find they must sign in again after restarting the browser. The docs say the fix is on the server side and not something you control in the browser.
Do not confuse it with the Gold Open Source extension. The download page describes that one as a free launcher for gold.safeguard.sh that lets you check a package, container image, CVE, AI model, MCP server or agent skill, with no account needed. It is a separate extension.
Who should install it?
- Engineers who triage findings while reading a pull request or an advisory in another tab and want to ask a question in plain English.
- Security analysts who bounce between a CVE page and the platform.
- Reviewers who work in Firefox by policy or by preference and want parity with Chrome users.
If you mostly work in an editor, the IDE extensions are a better fit. If you automate, use the CLI.
What to do
- Confirm you have a Safeguard account and can sign in at app.safeguard.sh.
- Open the download page and choose Add to Firefox, which takes you to the Firefox Add-ons listing.
- Install and pin the toolbar icon so Open Safeguard is one click away.
- Open the sidebar and sign in inside it.
- Try a lookup such as a CVE id or a package name you use.
- If your organization restricts add-ons, ask your Safeguard administrator, since tenant admins can switch off client types.
- Check the manifest against the docs if your security team wants to review permissions.
Quick check
Does the Firefox extension read the websites I visit?
According to the docs, no. It declares no host permissions and only embeds the Safeguard search page in a sidebar.
Do I need a separate login for the extension?
No. You sign in inside the embedded page as you would in a browser tab.
Sources
- Download Safeguard, read 18 October 2026
- Browser Extension, Safeguard Docs, read 18 October 2026
Last reviewed: 18 October 2026.
