Safeguard Portal is the SBOM command center. Publish, version, diff and securely share software bills of materials with customers and auditors, with EO 14028 verification and full audit trails.
Every enterprise customer, auditor and regulator now asks the same question: what is actually inside the software you shipped us? Safeguard Portal is where you answer it. It is the SBOM command center, a single place to publish, version, compare and share software bills of materials with the people who need them, without emailing spreadsheets or granting outsiders access to your internal scanning tools.
Portal keeps a clear line between publishing and sharing. Publishing moves an artifact from your internal projects into Portal and creates an immutable copy, so there is a fixed record of exactly what you released. Sharing distributes that record onward as it stands, through direct links, a branded customer portal, or NDA-gated access, and every view is tracked. The SBOM repository holds versions and tags with diffing between them, so you can show a customer precisely what changed between two releases. Compliance checks cover Executive Order 14028 verification and the NTIA minimum elements, and audit trails export to your SIEM.
Portal is offered here at no charge. The free tier covers one existing repository plus one open source repository from GitHub, GitLab or Bitbucket, with one project per month and software composition analysis, which is enough to generate, publish and share real SBOMs. It also imports SBOMs produced elsewhere, including Syft and Trivy output, so it works as a management layer over tooling you already run. Formats cover SPDX and CycloneDX with more than 30 export options, plus CSAF and VEX upload. The Trust Center, which publishes live security posture on your own domain and helps auto-answer SIG and CAIQ questionnaires, is newer and expanding. Higher volumes and the full scanning platform are available through Safeguard ESSCM.
Portal is one surface in a connected ecosystem. The same account works across the web app, desktop apps for Windows, macOS and Linux, mobile apps for iOS and Android, a Chrome extension, a local runner CLI and IDE extensions for VS Code, IntelliJ, JetBrains and Cursor. Portal shares its findings model, policy engine and evidence store with Safeguard ESSCM for supply chain security, TPRM for third-party risk and OSM for open source intelligence, so an SBOM published here carries the same scan evidence a developer saw in the IDE and the same record an auditor reads in the compliance suite.
Highlights
Publish and share with an audit trail. Publishing creates an immutable copy of exactly what you released. Sharing distributes it onward through direct links, a branded customer portal or NDA-gated access, with every view tracked and audit trails exportable to your SIEM.
Answer the SBOM request without the spreadsheet. Version, tag and diff SBOMs in SPDX and CycloneDX, verify against Executive Order 14028 and the NTIA minimum elements, and export in more than 30 formats, with CSAF and VEX upload.
Free to start, and it works over tooling you already run. Import SBOMs generated by Syft, Trivy and others, connect a repository from GitHub, GitLab or Bitbucket, and manage everything in one place at no cost.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing offers one pricing dimension: a Free usage tier billed at no cost. You get access to Portal for SBOM management and secure sharing without a card or expiry. There are no paid tiers, instance sizes, or usage add-ons to select on AWS Marketplace. The single Free dimension covers publishing, sharing, and redistributing SBOMs with versioning and NTIA minimum elements. Because only one dimension exists, pricing does not scale by seats, volume, or commitment term here. You use the Free plan directly with no additional selection required.
Top-of-mind questions for buyers
What does the Free plan on Portal count for billing, and is there a usage limit?
The Free tier meters SBOMs by products published. The free entry point covers 1 product published at no cost, with no card and no expiry. You publish, share, and redistribute that SBOM with versioning and NTIA minimum elements. This is separate from the platform's per-developer scanning plan.
What happens to cost if I need to publish more products than the Free tier allows?
The Free dimension on AWS Marketplace stays at no cost and does not automatically bill you for extra products. Higher publishing volume runs on separate Portal tiers not offered here. To publish more products, contact the vendor about options beyond this listing.
Is the Free plan a time-limited trial, or does it stay free?
The Free tier is free with no card required and no expiry. It is not a time-limited trial. You keep access to publish and share SBOMs at the included amount for as long as you use it.
safeguard.sh+1
Helpful?
Vendor refund policy
Safeguard Portal is provided through AWS Marketplace at no charge, so no fees are collected and no refunds arise. You can cancel the subscription at any time from the AWS Marketplace console. If you believe you have been charged in error, or you have a question about a paid Safeguard product purchased separately, email hi@safeguard.sh with your AWS account ID and the product name. We respond within one business day.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support is included at no additional charge with this listing.
Level of support you can expect
Email support is available Monday to Friday. Our standard target is a first response within one business day for all customers on this listing, covering account setup, onboarding, product usage, integration questions and defect reports. Severity one issues affecting availability are triaged on receipt and worked continuously until a workaround or fix is in place.
Enterprise agreements purchased through a private offer add a named technical account manager, agreed response targets, assisted onboarding, and support for private VPC, on-premises and air-gapped deployments.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Rapid GenAI risk assessment and governance implementation services powered by SurePath AI. Get actionable insights into your organization's GenAI usage, identify data exposure risks, and implement comprehensive governance frameworks to secure and scale AI adoption safely across your enterprise.
SAFE TPRM is the only fully autonomous third-party risk management solution, powered by agentic AI to automate the entire TPRM lifecycle - from onboarding and inherent risk scoring to evidence collection, continuous monitoring, reassessments, and reporting.
By ingesting live threat intelligence, control data, and business context, SAFE prioritizes vendors based on quantified business risk rather than static questionnaires or subjective scoring. AI agents orchestrate workflows across systems, escalating only what requires human judgment and eliminating manual, low-value work.
The result is a defensible, audit-ready program that scales to thousands of vendors without adding headcount, delivering real-time visibility, faster assessments, and stronger cyber resilience.
Portal 26, is an Enterprise GenAI Adoption Management Platform that detects and analyzes GenAI consumption across your organization to enable maximum impact while mitigating risks.
Salt Security protects the APIs that power your business including the APIs behind AI agents, mobile apps, SaaS platforms, and microservices. Our platform delivers deep visibility, threat detection, and runtime protection to stop API attacks and secure your entire API ecosystem leveraging the AWS infrastructure.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.