Software Security Monitoring

Know Your VulnerabilitiesBefore Adversaries Do

Track dependencies across all your projects. Get instant alerts when new CVEs affect your stack. Generate SBOMs with one click.

Get StartedView Features
200K+CVEs Tracked
18+Ecosystems
<1minAlert Time
The Challenge

Security Chaos Across Your Stack

Managing security across multiple enterprise projects can be overwhelming

Scattered Alerts

Dependabot alerts drowning each repo. No central view of what actually matters.

Manual Tracking

Maintaining spreadsheets of versions is tedious and always outdated.

Slow Response

When a critical CVE drops, you need answers in minutes, not hours.

The Solution

Complete Supply Chain Visibility

Guardian gives you complete visibility into your software supply chain

01

Multi-VCS Integration

Connect GitHub, GitLab, Bitbucket, Azure DevOps, Gitea, or SVN repositories. We automatically discover all dependency files and track versions in real-time.

02

Dependency Discovery

18+ ecosystems supported: Go, Node.js, Python, Rust, Java, Ruby, PHP, .NET, Docker, Kubernetes, Helm, Terraform, and more.

03

NVD Integration

Continuously synced vulnerability database. Match your dependencies against 200,000+ CVEs automatically.

04

Instant Alerts

Get notified immediately when a new vulnerability affects any of your tracked versions. Email, Slack, or webhooks.

05

SBOM Generation

Export CycloneDX and SPDX 2.3 compliant SBOMs for compliance. One click per project, always up-to-date.

06

SAST Scanning

Static Application Security Testing with 15+ tools. Find vulnerabilities in source code with CWE-based deduplication.

07

License Tracking

Automatically detect licenses in all your dependencies. Get alerts when forbidden licenses like GPL or AGPL are found. Ensure compliance across all projects.

08

Central Dashboard

See all projects, all vulnerabilities, all dependencies in one place. Filter by severity, ecosystem, or project.

Integrations

Connect Any Repository

Seamlessly integrate with all major version control systems and hosting platforms

GitHub

GitHub.com and GitHub Enterprise Server support with full API integration

Public & Private ReposPersonal Access Token

GitLab

GitLab.com and self-hosted GitLab instances with custom URL configuration

Self-Hosted SupportPersonal Access Token

Bitbucket

Bitbucket Cloud integration with workspace and repository access

App Password AuthWorkspace Access

Azure DevOps

Azure Repos integration with organization and project support

Personal Access TokenOrganization Repos

Gitea

Gitea and Forgejo self-hosted instances with configurable base URL

Self-HostedLightweight

SVN

Apache Subversion support with full checkout capabilities for legacy systems

Legacy SupportFull Checkout
Coverage

Supported Ecosystems

Comprehensive coverage across languages, package managers, and infrastructure-as-code

Languages & Package Managers

Gogo.mod
Node.jsnpm, yarn, pnpm
Pythonrequirements.txt, pyproject.toml
RustCargo.toml
Javapom.xml, build.gradle
RubyGemfile
PHPcomposer.json
.NET*.csproj, packages.config

Containers & Infrastructure

DockerDockerfile
Kubernetesdeployment.yaml
HelmChart.yaml, values.yaml
Terraform.tf, .terraform.lock.hcl
OpenTofu*.tofu
PulumiPulumi.yaml
CloudFormationtemplate.yaml
Ansiblerequirements.yml

Development Tools

MakefileMakefile, *.mk
Mise.mise.toml, .tool-versions
Use Cases

Answer Questions Instantly

Questions that used to take hours now take seconds

$ Is any of our projects vulnerable to CVE-2024-XXXX?
> Search by CVE ID and see all affected projects in one view.
$ What version of lodash are we using in Project X?
> Complete dependency inventory per project with exact versions.
$ Which projects share the same vulnerable dependency?
> Cross-project analysis shows shared dependencies and vulnerabilities.
$ Do we have any critical vulnerabilities we need to fix today?
> Filter by severity. See critical issues first, with fix recommendations.
$ Are any of our projects using GPL-licensed dependencies?
> License tracking shows all dependency licenses. Get alerts for forbidden licenses.

Start Monitoring Your Assets

Connect your first project in under 5 minutes. No credit card required.

Get Started FreeLearn More