Any third-party building block in your software: packages, container images, AI models, MCP servers.
Component is the umbrella term for everything your software is assembled from that you didn't write: language packages, container base images, AI model artifacts, tool servers. If it ships in or under your product, it is a component — and it is part of your attack surface.
Safeguard's crawler discovers components across ecosystems, generates SBOMs for them, scans them for vulnerabilities and malware, and publishes the results here as the public Gold directory.