sbomify is a product security artifact hub and a trust center.
-
Updated
Oct 1, 2026 - Python
sbomify is a product security artifact hub and a trust center.
Adds features to mail merge, including attachments and change sender to delegate
A self-hosted, open-source trust center plugin for WordPress with an optional AI assistant grounded in your own policies.
A curated list of resources for the answerer's side of security questionnaires — frameworks, response tools, trust centers, templates, and guides for teams that receive a SIG/CAIQ and must answer it.
Programmatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.
270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF
Plain-language model answers to ~100 common enterprise security questionnaire questions, for small companies without SOC 2. Public domain (CC0).
Open security assurance registry and trust center for AI agents, MCP servers, agent identity, authorization, governance, compliance evidence, and continuous verification.
Self-hostable trust center platform to provide stakeholders with access to compliance documents and handle confidentiality with ease.
Ethical, survive-led AI trust center for transparency and data integrity.
Trust center and KYC verification service for secure identity workflows.
Autional 信任中心 —— 安全实践、数据保护与合规建设进展说明。
Self-hosted compliance automation with AI-powered questionnaire answering, public Trust Center, and continuous AWS/GitHub monitoring. BYOK — supports OpenAI, Anthropic, Gemini, Groq, DeepSeek, Mistral, Ollama, and 10+ LLM providers.
Scytale — independent third-party profile of a public API surface, by API Evangelist. Scytale is an AI-powered Governance, Risk, and Compliance (GRC) platform that automates security compliance for cloud and SaaS companies. It combines AI agents with in-house compliance experts to automate evidence collection, continuous control monitoring, cross-f
[ARCHIVED 2026-05-31 — superseded by https://github.com/mizcausevic-dev/kinetic-gain-embedded/blob/main/docs/sales/PROCUREMENT-PACKET.md]
Whistic — independent third-party profile of a public API surface, by API Evangelist. Whistic is an AI-driven Third-Party Risk Management (TPRM) platform that helps organizations assess vendor security, monitor third-party risk continuously, and share their own security posture through a Trust Center.
Monarch Money — independent third-party profile of a public API surface, by API Evangelist. Monarch (formerly Monarch Money) is a subscription personal-finance app for budgeting, net-worth and account tracking, investment monitoring, goals, forecasting, and collaborative money management for couples and financial professionals.
Independent platform for continuous internal compliance baselining and gap tracking. Helps teams maintain readiness and prepare for third-party SOC, ISO and similar verification; it does not provide certification or replace independent assurance.
Independent external monitoring of the Seetrex Compliance Trust Center
Motore e registri del Genesis Trust Framework: Trust Center pubblici generati da un registro verificabile — principi, requisiti, controlli, evidenze, rischi e un punteggio calcolato solo dai dati raccolti.
To associate your repository with the trust-center topic, visit your repo's landing page and select "manage topics."