in-totoA framework to secure the integrity of software supply chains<br>Learn More<br>Get started<br>Try the demo
in-toto is designed to ensure the integrity of a software product from<br>initiation to end-user installation. It does so by making it transparent to the<br>user what steps were performed, by whom and in what order.
Open, extensible standard<br>An open metadata standard that you can implement in your software’s supply<br>chain.
Read more
Adoptions and Integrations<br>Explore integrations and adopters of in-toto.
Read more
Extensive tooling<br>Use in-toto today through Apache-licensed libraries and tools.
Read more
in-toto is a CNCF graduated project .