CIOPages
Directoryin-toto

in-toto

Open Source

About in-toto

in-toto is software that tracks the integrity of a software product from initiation to end-user installation by recording what steps were performed, who performed them, and in what order.

Key Capabilities

  • End-to-end software supply chain integrity verification
  • Open metadata standard for supply chain transparency
  • Apache-licensed extensible tooling and libraries
  • Integration with existing DevOps pipelines
  • CNCF graduated project with community support

Integrations

DevOps pipeline platforms

This profile was compiled by CIOPages from public sources with AI assistance, and may be incomplete or out of date. It is informational only and not an endorsement. Represent this vendor? Claim this listing or .

Quick Facts

in-toto.io
PricingOpen Source
DeploymentOpen Source
Target SizeEnterprise