DUBLIN, CALIFORNIA — July 28, 2026 — Safeguard.sh Inc., the AI-native enterprise software supply chain security platform, today announced that it has crossed $1 million in annual recurring revenue — the company's first ARR milestone, reached in 2026, two years after it was founded.
The milestone is aggregate across every route Safeguard sells through: direct enterprise sales, channel and white-label partners, and self-serve sign-ups on the platform.
What got the company here
Safeguard's thesis has been narrow and consistent since 2024: as AI coding agents author a growing majority of production code, the software supply chain becomes the largest unmanaged attack surface in the enterprise — and a list of findings is not a defence. The platform is built to close the loop rather than report on it, with three purpose-built models doing the work:
- Griffin — discovery and auto-fix. Walks the dependency graph 100 layers deep, performs reachability and taint analysis, and autonomously authors fix PRs. Five variants from Griffin Lite (8B) to Griffin Zero (671B-MoE).
- Eagle — threat reasoning. Cuts false positives ~80% and compresses remediation from 45 days to 3.
- Lion — governance and guardrails, running alongside every AI coding agent.
To date the engine has coordinated-disclosed 50+ zero-days, applied 100K+ autonomous remediations, and completed 1M+ scans.
Revenue has followed platform breadth. Over the past several months Safeguard shipped first-party SAST and DAST, MCP-server AI-agent governance with per-tool feature gating, agent-led procurement through MCP, the Guard SDK, a Chrome extension, DORA and NIS2 compliance packs, an eleventh scanner in the Supply Chain Core, and Safeguard Academy — a free learning and certification platform. Deployment spans SaaS, private cloud, and sovereign / air-gapped, with a FedRAMP HIGH-ready and IL7-ready posture and SOC 2 Type II audit in progress.
Partner-led revenue is a growing share of the mix. Safeguard's collaboration with TechD Cybersecurity Limited (NSE SME: TECHD) delivers the platform across India and the Middle East as the Provenance AI module on TECHD ONE, and Lagos-based OffShield Security was appointed this week as Safeguard's first Nigerian and West African partner. The company also opened its channel and white-label partner program worldwide today.
Leadership commentary
"A million in ARR is not a victory lap — plenty of companies get here and stall. What it does tell us is that the thing we bet on is a thing people will actually pay for: not another scanner that hands you 4,000 findings and a dashboard, but a platform that finds the vulnerability, decides whether it can actually be exploited in your environment, and then writes and tests the fix. Buyers stopped wanting reports a while ago. This number is the first real evidence at scale that they'll fund the alternative — and we want to be very clear that a meaningful slice of it came through partners who reached customers we could never have reached ourselves."
— Hritik Kumar Sharma, Founder & CEO, Safeguard.sh Inc.
About Safeguard
Safeguard.sh Inc. is the Dublin, California–headquartered AI-native enterprise software supply chain security platform — ".sh" stands for Self-Healing. Founded in 2024. FedRAMP HIGH-ready, IL7-ready, SOC 2 Type II (audit in progress). Press enquiries: press@safeguard.sh.
Forward-looking statements: This release contains forward-looking statements regarding Safeguard.sh Inc. Annual recurring revenue is an internal operating metric, is unaudited, and is not a substitute for revenue recognised under GAAP. Actual outcomes may differ materially.
