Most security work needs a screen and a keyboard. A small part of it does not: knowing that something critical just landed, and making a quick call on something waiting for you. That is the part Safeguard on Apple Watch is for.
Safeguard is available on Apple Watch. For the current build and requirements, use the download page.
What it is
The watch is a notification and decision surface, not a place to investigate. Think of it as the end of a chain. Safeguard scans, a finding or a gate event is raised, a notification reaches you, and the watch lets you see it and respond.
You would not review a dependency tree on a wrist. You would learn that a build is blocked, see which project it is, and decide whether it needs you now or at your desk.
How to use it
- Install Safeguard on your phone and sign in.
- Get the watch app from the download page.
- Decide which events deserve a tap on the wrist. Critical findings and blocked gates are good candidates. Everything else can wait for the inbox.
Notifications are only as good as the filter behind them. A watch that buzzes forty times a day gets muted, so be strict about what you send it.
What belongs on a wrist
- A new critical finding in a project you own.
- A pull request gate that is waiting on a human decision.
- A scan that failed and needs a restart.
What does not belong: long lists, diffs, SBOM views and anything that needs reading. Hand those off to your phone or laptop.
Try it yourself
Think about the last three times you wished you had been told sooner. Write down what the message would have said in under ten words. If you cannot say it that briefly, it is not a watch notification. The demo below walks through a pull request gate, which is a natural place for a quick approve or hold decision.
Click through it at your own pace, or open it full screen.
Quick check
What should a watch notification contain?
What happened, where, and whether it needs you now. If it needs reading or investigation, it belongs on a phone or laptop.
Why filter notifications hard before sending them to a watch?
Because a noisy watch gets muted, and then the one critical alert is missed along with the rest.