Sold by: Safeguard
AWS Free Tier
Safeguard Portal is the SBOM command center. Publish, version, diff and securely share software bills of materials with customers and auditors, with EO 14028 verification and full audit trails.
Overview
Every enterprise customer, auditor and regulator now asks the same question: what is actually inside the software you shipped us? Safeguard Portal is where you answer it. It is the SBOM command center, a single place to publish, version, compare and share software bills of materials with the people who need them, without emailing spreadsheets or granting outsiders access to your internal scanning tools.
Portal keeps a clear line between publishing and sharing. Publishing moves an artifact from your internal projects into Portal and creates an immutable copy, so there is a fixed record of exactly what you released. Sharing distributes that record onward as it stands, through direct links, a branded customer portal, or NDA-gated access, and every view is tracked. The SBOM repository holds versions and tags with diffing between them, so you can show a customer precisely what changed between two releases. Compliance checks cover Executive Order 14028 verification and the NTIA minimum elements, and audit trails export to your SIEM.
Portal is offered here at no charge. The free tier covers one existing repository plus one open source repository from GitHub, GitLab or Bitbucket, with one project per month and software composition analysis, which is enough to generate, publish and share real SBOMs. It also imports SBOMs produced elsewhere, including Syft and Trivy output, so it works as a management layer over tooling you already run. Formats cover SPDX and CycloneDX with more than 30 export options, plus CSAF and VEX upload. The Trust Center, which publishes live security posture on your own domain and helps auto-answer SIG and CAIQ questionnaires, is newer and expanding. Higher volumes and the full scanning platform are available through Safeguard ESSCM.
Portal is one surface in a connected ecosystem. The same account works across the web app, desktop apps for Windows, macOS and Linux, mobile apps for iOS and Android, a Chrome extension, a local runner CLI and IDE extensions for VS Code, IntelliJ, JetBrains and Cursor. Portal shares its findings model, policy engine and evidence store with Safeguard ESSCM for supply chain security, TPRM for third-party risk and OSM for open source intelligence, so an SBOM published here carries the same scan evidence a developer saw in the IDE and the same record an auditor reads in the compliance suite.
Highlights
- Publish and share with an audit trail. Publishing creates an immutable copy of exactly what you released. Sharing distributes it onward through direct links, a branded customer portal or NDA-gated access, with every view tracked and audit trails exportable to your SIEM.
- Answer the SBOM request without the spreadsheet. Version, tag and diff SBOMs in SPDX and CycloneDX, verify against Executive Order 14028 and the NTIA minimum elements, and export in more than 30 formats, with CSAF and VEX upload.
- Free to start, and it works over tooling you already run. Import SBOMs generated by Syft, Trivy and others, connect a repository from GitHub, GitLab or Bitbucket, and manage everything in one place at no cost.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimensions summary
This listing offers a single pricing dimension: a Free tier billed at no cost. You get one usage option with nothing to configure or scale up through Marketplace. The Free plan lets you publish and share SBOMs, apply NTIA minimum elements, and access core scanning and remediation without a card or expiry. Because there is only one dimension, there are no tiers, seat counts, or usage add-ons to select here. Everything runs under a single no-cost entry point.
Top-of-mind questions for buyers
The Free dimension carries no charge, so no billed unit accrues cost. On the free scanning tier you get set monthly allowances: five fix pull requests, 100 components scanned, and 100 tool calls. These are usage caps, not charges. Nothing is metered into a bill.
The Free plan includes fixed monthly amounts: five fix PRs, 100 components scanned, and 100 tool calls. When you hit a cap, that activity pauses until the next monthly reset. Free is free forever with no card and no expiry, so exceeding a cap does not trigger charges.
You can publish and share SBOMs in CycloneDX and SPDX formats with NTIA minimum elements and version control. All scanners run at view depth, plus software composition analysis, reachability-based prioritization, and automated fix suggestions. At least one on-demand scan is included each month.
safeguard.sh+1
Helpful?
Vendor refund policy
Safeguard Portal is provided through AWS Marketplace at no charge, so no fees are collected and no refunds arise. You can cancel the subscription at any time from the AWS Marketplace console. If you believe you have been charged in error, or you have a question about a paid Safeguard product purchased separately, email hi@safeguard.sh with your AWS account ID and the product name. We respond within one business day.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support is included at no additional charge with this listing.
Support contacts Email: hi@safeguard.sh Contact form: https://safeguard.sh/company/contact Documentation: https://docs.safeguard.sh Training and certification: https://academy.safeguard.sh
Level of support you can expect Email support is available Monday to Friday. Our standard target is a first response within one business day for all customers on this listing, covering account setup, onboarding, product usage, integration questions and defect reports. Severity one issues affecting availability are triaged on receipt and worked continuously until a workaround or fix is in place.
Enterprise agreements purchased through a private offer add a named technical account manager, agreed response targets, assisted onboarding, and support for private VPC, on-premises and air-gapped deployments.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Portal26 is an enterprise AI Adoption Management Platform that discovers shadow AI, enforces security policies, and drives value realization across your organization's GenAI usage.
Safeguard Gold Open Source is a free directory of open source intelligence. Look up any package across more than twenty ecosystems and see CVEs, CWEs, KEV, EPSS, malware signals and SGZ zero-day advisories before you install it.
SBOM Manager for rapid, reliable compliance at scale and sharper development and security posture.
Rapid GenAI risk assessment and governance implementation services powered by SurePath AI. Get actionable insights into your organization's GenAI usage, identify data exposure risks, and implement comprehensive governance frameworks to secure and scale AI adoption safely across your enterprise.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.