diff --git a/README.md b/README.md
index 071e3a9..400cd42 100644
--- a/README.md
+++ b/README.md
@@ -103,6 +103,7 @@ Modern DevSecOps tools allow using Threat modeling as code or generation of thre
 | **Sonarlint** | [https://github.com/SonarSource/sonarlint-core](https://github.com/SonarSource/sonarlint-core) |  Sonar linting utility for IDE |![Sonarlint](https://img.shields.io/github/stars/SonarSource/sonarlint-core?style=for-the-badge)|
 | **DevSkim** | [https://github.com/microsoft/DevSkim](https://github.com/microsoft/DevSkim) |  DevSkim is a framework of IDE extensions and language analyzers that provide inline security analysis |![DevSkim](https://img.shields.io/github/stars/microsoft/DevSkim?style=for-the-badge)|
 | **detect-secrets** | [https://github.com/Yelp/detect-secrets](https://github.com/Yelp/detect-secrets) |  Detects secrets in your codebase |![DevSkim](https://img.shields.io/github/stars/Yelp/detect-secrets?style=for-the-badge)| 
+| **Content Guard** | [https://github.com/escoffier-labs/content-guard](https://github.com/escoffier-labs/content-guard) | Policy-driven secret and PII leak scanner and publish gate for content that leaves your machine (PR bodies, docs, release notes, AI agent output). Catches hostnames, private IPs, keys, and credentials, with named policy profiles and in-place redaction. | ![Content Guard](https://img.shields.io/github/stars/escoffier-labs/content-guard?style=for-the-badge) |
 | **tflint** | [https://github.com/terraform-linters/tflint](https://github.com/terraform-linters/tflint) | A Pluggable Terraform Linter | ![tflint](https://img.shields.io/github/stars/terraform-linters/tflint?style=for-the-badge)|
 | **Steampipe Code Plugin** | [https://github.com/turbot/steampipe-plugin-code](https://github.com/turbot/steampipe-plugin-code) | Use SQL to detect secrets from source code and data sources. | [![GitHub stars](https://img.shields.io/github/stars/turbot/steampipe-plugin-code)](https://github.com/turbot/steampipe-plugin-code/stargazers) |