sbomify is a product security artifact hub and a trust center.
-
Updated
Sep 14, 2026 - Python
sbomify is a product security artifact hub and a trust center.
Adds features to mail merge, including attachments and change sender to delegate
A self-hosted, open-source trust center plugin for WordPress with an optional AI assistant grounded in your own policies.
Programmatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.
A curated list of resources for the answerer's side of security questionnaires — frameworks, response tools, trust centers, templates, and guides for teams that receive a SIG/CAIQ and must answer it.
Open security assurance registry and trust center for AI agents, MCP servers, agent identity, authorization, governance, compliance evidence, and continuous verification.
Self-hostable trust center platform to provide stakeholders with access to compliance documents and handle confidentiality with ease.
Plain-language model answers to ~100 common enterprise security questionnaire questions, for small companies without SOC 2. Public domain (CC0).
Trust center and KYC verification service for secure identity workflows.
Ethical, survive-led AI trust center for transparency and data integrity.
[ARCHIVED 2026-05-31 — superseded by https://github.com/mizcausevic-dev/kinetic-gain-embedded/blob/main/docs/sales/PROCUREMENT-PACKET.md]
Whistic — independent third-party profile of a public API surface, by API Evangelist. Whistic is an AI-driven Third-Party Risk Management (TPRM) platform that helps organizations assess vendor security, monitor third-party risk continuously, and share their own security posture through a Trust Center.
270+ compliance automation tools: GRC platforms, access review, vendor risk, CSPM, endpoint, trust centers. SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST CSF
Motore e registri del Genesis Trust Framework: Trust Center pubblici generati da un registro verificabile — principi, requisiti, controlli, evidenze, rischi e un punteggio calcolato solo dai dati raccolti.
Monarch Money — independent third-party profile of a public API surface, by API Evangelist. Monarch (formerly Monarch Money) is a subscription personal-finance app for budgeting, net-worth and account tracking, investment monitoring, goals, forecasting, and collaborative money management for couples and financial professionals.
Scytale — independent third-party profile of a public API surface, by API Evangelist. Scytale is an AI-powered Governance, Risk, and Compliance (GRC) platform that automates security compliance for cloud and SaaS companies. It combines AI agents with in-house compliance experts to automate evidence collection, continuous control monitoring, cross-f
Self-hosted compliance automation with AI-powered questionnaire answering, public Trust Center, and continuous AWS/GitHub monitoring. BYOK — supports OpenAI, Anthropic, Gemini, Groq, DeepSeek, Mistral, Ollama, and 10+ LLM providers.
Independent platform for continuous internal compliance baselining and gap tracking. Helps teams maintain readiness and prepare for third-party SOC, ISO and similar verification; it does not provide certification or replace independent assurance.
Independent external monitoring of the Seetrex Compliance Trust Center
Executive trust-room surface for evidence packaging, artifact freshness, review readiness, and buyer-safe diligence posture.
To associate your repository with the trust-center topic, visit your repo's landing page and select "manage topics."