Triage CVEs Automatically.
Ship Patched Images.
HarborGuard goes beyond scanning. Automatic CVE triage surfaces what actually needs action, and automatic container image patching ships a fixed image without a full rebuild — all behind one dashboard.
Compliance Frameworks
CVE Noise, Eliminated.
Most scanners hand you a list and walk away. HarborGuard's automatic CVE triage watches every scan and every new CVE advisory, then opens prioritized triage runs so your team works the risks that matter — not the ones that don't.
- Auto-triage triggered on scan completion and new CVE alerts
- Configurable minimum severity threshold per org
- SLA tracking with breach notifications
- False-positive attestations with immutable audit trail
- CVE Watch monitors NVD, OSV, GitHub, and CISA KEV
CVE-2024-6197
curl 8.6.0
CVE-2024-5535
openssl 3.2.1
CVE-2024-3596
freeradius 3.0
Fix the Image. Skip the Rebuild.
HarborGuard patches container images in place — no Dockerfile rewrite, no CI pipeline change. The patched image is pushed back to your registry ready to deploy.
- Patches pushed directly to your registry
- Cloud-dispatch: runs in an isolated ephemeral cloud worker
- Full audit trail per patch operation
Six Scanners. One Workflow.
Run Trivy, Grype, Syft, Dockle, OSV-Scanner, and Dive against any image from any registry. HarborGuard deduplicates findings across scanners and attributes each CVE to the tool that found it.
- Trivy + Grype vulnerability detection
- Syft SBOM generation (SPDX & CycloneDX)
- Dockle CIS benchmark grading
- Dive layer-by-layer image inspection
- OSV open-source vulnerability matching
Every Registry. One Pane of Glass.
Connect Docker Hub, ECR, GCR, ACR, GHCR, GitLab, Harbor, JFrog, Quay, Nexus, or any OCI-compliant registry. Schedule scans, filter by tag patterns, and monitor sync health.
- 11 registry providers including custom OCI
- Scheduled and on-push scanning
- Tag pattern filtering (include/exclude)
- Real-time sync and connection health
Monitor. Auto-Triage. Attest.
CVE Watch continuously monitors NVD, OSV, GitHub Security Advisories, and CISA KEV for new vulnerabilities affecting your packages. When a match is found, automatic CVE triage opens a prioritized run — no manual queue-building required.
- 4 CVE sources aggregated and deduplicated
- Automatic CVE triage on new advisories
- SLA tracking with breach notifications
- False-positive attestations with audit trail
CVE-2024-6197
curl 8.6.0
CVE-2024-5535
openssl 3.2.1
CVE-2024-3596
freeradius 3.0
Audit-Ready Evidence. Always.
Generate control-mapped compliance packs for SOC 2, PCI-DSS, NIST 800-53, HIPAA Security Rule, FedRAMP Moderate, ISO 27001, CMMC, and CIS Docker Benchmark. Build custom reports with the visual report builder, schedule recurring generation, and export evidence packs on demand.
- 10 compliance frameworks out of the box
- Visual report builder with custom sections
- SLA tracking and MTTR metrics
- Immutable audit log for every action
- Scheduled report generation
Enterprise-Grade from Day One
RBAC & Teams
Owner, admin, developer, auditor, and viewer roles. Organize members into teams scoped to specific registries.
SSO & SCIM
SAML, OIDC, and LDAP single sign-on. SCIM provisioning with automated role mapping from your identity provider.
Notifications
Route alerts to Slack, email, PagerDuty, or custom webhooks. Configure per-severity thresholds and digest schedules.
API & CI/CD
Full REST API with scoped API keys and personal access tokens. Trigger scans from your CI pipeline.
SBOM & Dependencies
Aggregate SBOMs across all images. Track package versions, licenses, and vulnerability exposure in one view.
Layer Analysis
Inspect image layers, compare consecutive layer diffs, and identify which layer introduced a vulnerability.
Dashboard & Metrics
Customizable dashboard with compliance posture, severity trends, scan coverage, and mean-time-to-remediate KPIs.
Cloud Sensors
Deploy lightweight scan sensors via Docker or Kubernetes. Scans run in your infrastructure, results report back.
PRICING
Open Source Core. Enterprise Scale.
harborguardContinuous container security and vulnerability management for teams that ship containers.
© 2026 HarborGuard. All rights reserved.