HarborGuard Documentation

HarborGuard is a container vulnerability scanning platform that unifies six open-source scanners (Trivy, Grype, Syft, Dockle, OSV-Scanner, Dive) behind one API and one dashboard. It produces vulnerability findings, SBOMs, license inventories, and audit-ready compliance evidence packs across every registry in your supply chain.

Get started in 5 minutes

1. Sign in to your workspace at harborguard.co. The first user in a new organization becomes the owner.
2. Connect a registry — Docker Hub, ECR, GCR, ACR, GHCR, GitLab, Harbor, JFrog, Quay, Nexus, or any OCI-compliant registry.
3. Trigger a scan from the UI, the REST API, or your CI pipeline.
4. Review findings — vulnerabilities ranked by exploitability (CVSS, EPSS, KEV), grouped by image, package, and SLA status.
5. Export evidence — generate compliance packs (SOC 2, PCI-DSS, NIST, HIPAA, FedRAMP, ISO 27001, CMMC, CIS Docker) on demand.

curl -X POST https://harborguard.co/api/scans \
  -H "Authorization: Bearer hg_ak_..." \
  -H "Content-Type: application/json" \
  -d '{"image": "nginx:1.27", "scanners": ["trivy", "grype", "syft"]}'

Documentation map

Platform basics

Findings and remediation

Operations

Reference