Safeguard Reviews & Product Details

I use Safeguard to secure my website and web application, and it does a great job keeping me posted about security. I like its 0-day scanning because it detects threats right away. The Griffin AI feature is also really helpful for searching and understanding my system. Even though I have a small tech team, I found the initial setup to be super easy overall. I think Safeguard is performing well as compared to others, which is why I'd give it a 10 for recommending to a friend or colleague. Review collected by and hosted on G2.com.

Setting up Safeguard was a bit difficult for me because I don't have a big tech team, but overall it was super easy. Review collected by and hosted on G2.com.

I really appreciate that Safeguard solves the problem of my code being unintentionally leaked, keeping all my software safe. It even fixes and heals any issues within my software, which is a big plus. The human quality of the team impresses me, as they're extremely responsive and helpful. Anytime I had a problem, they quickly came to my aid, which is something I truly value. I also found the initial setup to be very effortless and fluid. Review collected by and hosted on G2.com.

nothing I can think of Review collected by and hosted on G2.com.

Reachability analysis is what sold me. With other scanners, we get a few hundred CVEs dumped on us and the rest of the triage is basically left as an exercise for the reader. Safeguard maps the call graph and shows which issues are actually reachable in our code, so our weekly list went from overwhelming to genuinely workable.

Then Griffin just fixes them. It opens a PR with the patch already applied and runs it through our pipeline first, so most of what lands in review is already green. I also like that we can work from the CLI or our IDE instead of having to live in yet another dashboard. Review collected by and hosted on G2.com.

The auto-generated PRs aren’t perfect. Most of them are clean, but a portion still needs a human to step in—like a patch that’s technically correct yet wrong for how we use the library, or an upgrade that passes CI but still requires a judgment call. Treating these PRs as reviewed-by-default would be a mistake; they’re proposals, not merges you can rubber-stamp.

That’s a reasonable trade-off for how much it does get right, and it’s still less work than writing the fixes ourselves. Just go in expecting to keep a human in the loop at the merge step. Review collected by and hosted on G2.com.

Its zero day tracking,as it analyze and give reports Review collected by and hosted on G2.com.

Not yet right now bt i guess scanning can be faster Review collected by and hosted on G2.com.