
in-toto
Supply Chain Security
Open source framework providing end-to-end software supply chain integrity verification.
Future of SoftwareStart Survey

Supply Chain Security
Open source framework providing end-to-end software supply chain integrity verification.

Supply Chain Security
Open-source project providing free code signing and verification infrastructure for software supply chain integrity and provenance.

Supply Chain Security
Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities.

Supply Chain Security
Software supply chain security platform providing SBOM management, code integrity verification, and continuous assurance across the SDLC.

Supply Chain Security
Software supply chain security platform providing SBOM generation, vulnerability management, and attestation for software integrity.
Price$50+ / month
Supply Chain Security
OpenSSF open-source project aggregating software supply chain metadata (SBOMs, SLSA, signatures) into a unified graph.

Supply Chain Security
Open-source software supply chain control plane for attesting, signing, and verifying build artifacts.
Supply Chain Security
Supplier ESG rating platform offering sustainability assessments and supply chain sustainability intelligence.

Supply Chain Security
Enterprise firmware and hardware security platform providing supply chain risk management and threat detection.

Supply Chain Security
Software supply chain security platform providing attestation, SBOM, and immutable audit logs.