Safeguard

Safeguard puts your software supply chain security in the browser's side panel, so you can ask about it without leaving the tab you are working in. ASK ABOUT YOUR OWN POSTURE Sign in and the panel answers against your real account: open findings and their severity, which projects are affected, what a given CVE means for the version you actually ship, and where you stand against the compliance frameworks you are tracking. The conversation is the same one the Safeguard web app runs, so an answer here is the answer there. IT KEEPS THE THREAD Conversations persist. Start a question on one tab, come back tomorrow, and the history is where you left it. Attach a file or a screenshot when a question needs one. IT CAN ACT ON THE PAGE, IF YOU LET IT The panel can drive the tab it is attached to — click, type, scroll, navigate — to carry out the steps you would otherwise do by hand. Three things constrain that, deliberately: · It is off until you turn it on, per tab. · It only ever touches tabs inside its own Safeguard tab group. Tabs outside that group, and other Safeguard groups, are unreachable. · Anything irreversible — sending, publishing, purchasing, deleting, accepting terms — stops and asks you first. That rule is enforced in the extension's own code, not left to the model's judgement. While a tab is being driven, Chrome shows its own "debugging this browser" notice and the extension adds a banner inside the page saying what is happening, with a way to stop it. Control is never quiet. WHY IT NEEDS THE DEBUGGER PERMISSION Input typed by an ordinary extension is flagged as untrusted, and real sites reject it — file pickers, native form behaviour and drag-and-drop simply do not respond. An agent that works on some pages and silently misbehaves on others is worse than one that refuses, so the extension uses Chrome's debugger API to send genuine input instead. Chrome does not allow that permission to be optional, so every install carries the warning whether or not you ever switch control on. PRIVACY Signing in stores an access token and your name, email and organisation from that token in local browser storage on your own device. Your questions, and the content of a page when you have explicitly asked the agent to work on it, are sent to Safeguard's own API to produce the answer. Nothing is sold, shared with third parties, or used for anything other than answering you. No analytics, no tracking, no telemetry. Sign out and the stored session is deleted and the token revoked. Requires a Safeguard account. Learn more at https://app.safeguard.sh