# Safe Chain: Prevent Malware Installs

Aikido protects your team from malicious packages at install time. There are two approaches depending on your setup.

## Aikido Device Protection (recommended)

A lightweight agent deployed across your team's devices. It blocks malicious packages before they install, gives you full visibility into every package installed across your organization, and lets you set approval policies per team or ecosystem.

{% content-ref url="../aikido-device-protection/endpoint-protection.md" %}
[endpoint-protection.md](https://help.aikidogov.us/aikido-device-protection/endpoint-protection)
{% endcontent-ref %}

## Safe Chain (open source)

An open source CLI tool that wraps your package managers (npm, pip, and others) to block malware at install time. Best suited for individual developers or CI/CD pipelines.

* [Safe Chain on GitHub](https://github.com/AikidoSec/safe-chain)
* [Using Safe Chain in CI/CD environments](https://github.com/AikidoSec/safe-chain#usage-in-cicd)