1B+ scans completed
Cumulative scan volume across SBOMs, container images, source repos, manifests, and live runtime agents — across every customer tenant, every region, since Safeguard launched.
By scan type
Where the volume comes from — SBOMs lead, container images follow.
How scans are counted
One scan = one signed attestation. Every scan emits an in-toto attestation signed by the regional cluster's sigstore identity. The 1B+ figure is the cumulative count of those attestations across all tenants since the platform launched.
Re-scans count. A package re-scanned after a new CVE lands counts as a new scan — that's the work being done. Continuous monitoring drives most of the volume; spot scans are a small fraction.
Customer attribution is hashed. The aggregate count is global; per-customer counts stay in each customer's tenant. Nothing is cross-attributed in the public number.