Every Image Scanned.
Every Framework Covered.
Harborguard unifies six open-source security scanners behind a single dashboard. Detect vulnerabilities, generate SBOMs, monitor CVEs, and prove compliance across 10 frameworks.
Compliance Frameworks
Six Scanners. One Workflow.
Run Trivy, Grype, Syft, Dockle, OSV-Scanner, and Dive against any image from any registry. HarborGuard deduplicates findings across scanners and attributes each CVE to the tool that found it.
- Trivy + Grype vulnerability detection
- Syft SBOM generation (SPDX & CycloneDX)
- Dockle CIS benchmark grading
- Dive layer-by-layer image inspection
- OSV open-source vulnerability matching
Every Registry. One Pane of Glass.
Connect Docker Hub, ECR, GCR, ACR, GHCR, GitLab, Harbor, JFrog, Quay, Nexus, or any OCI-compliant registry. Schedule scans, filter by tag patterns, and monitor sync health.
- 11 registry providers including custom OCI
- Scheduled and on-push scanning
- Tag pattern filtering (include/exclude)
- Real-time sync and connection health
Monitor. Triage. Attest.
Search NVD, OSV, GitHub Security Advisories, and CISA KEV from one interface. CVE Watch continuously monitors for new vulnerabilities affecting your packages and alerts your team via Slack, email, PagerDuty, or webhooks.
- 4 CVE sources aggregated and deduplicated
- CVE Watch with real-time alerting
- Vulnerability triage with SLA tracking
- False-positive attestations with audit trail
CVE-2024-6197
curl 8.6.0
CVE-2024-5535
openssl 3.2.1
CVE-2024-3596
freeradius 3.0
Audit-Ready Evidence. Always.
Generate compliance packs for SOC 2, PCI-DSS, NIST 800-53, HIPAA, FedRAMP, ISO 27001, CMMC, and CIS Docker Benchmark. Build custom reports with the visual report builder, schedule recurring generation, and export evidence packs on demand.
- 10 compliance frameworks out of the box
- Visual report builder with custom sections
- SLA tracking and MTTR metrics
- Immutable audit log for every action
- Scheduled report generation
Enterprise-Grade from Day One
RBAC & Teams
Owner, admin, developer, auditor, and viewer roles. Organize members into teams scoped to specific registries.
SSO & SCIM
SAML, OIDC, and LDAP single sign-on. SCIM provisioning with automated role mapping from your identity provider.
Notifications
Route alerts to Slack, email, PagerDuty, or custom webhooks. Configure per-severity thresholds and digest schedules.
API & CI/CD
Full REST API with scoped API keys and personal access tokens. Trigger scans from your CI pipeline.
SBOM & Dependencies
Aggregate SBOMs across all images. Track package versions, licenses, and vulnerability exposure in one view.
Layer Analysis
Inspect image layers, compare consecutive layer diffs, and identify which layer introduced a vulnerability.
Dashboard & Metrics
Customizable dashboard with compliance posture, severity trends, scan coverage, and mean-time-to-remediate KPIs.
Cloud Sensors
Deploy lightweight scan sensors via Docker or Kubernetes. Scans run in your infrastructure, results report back.
PRICING
Open Source Core. Enterprise Scale.
harborguardContinuous container security and vulnerability management for teams that ship containers.
© 2026 HarborGuard. All rights reserved.