Sigstore
sigstore.dev
Actively hiring
As featured in
Follow
Overview
News
Technologies
Salaries
Products
People
Growth
Financials
Overview
Sign. verify. protect. Make sure your software is what it claims to be.
News
Sigstore, the Swiss army knife of signing and attestation - Kernwerk
A practical tour of Sigstore's cosign and Rekor, key-pair signing, cloud KMS, keyless OIDC, the transparency log - and how we verify it all in 150 lines of freestanding C.
Read more
Report
npm supply chain: valid certificates, stolen accounts
Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages - one of seven developer tool attack surfaces that failed.
Read more
Report
Building cryptographic agility into Sigstore
We collaborated with the Sigstore community to build cryptographic agility into the software signing ecosystem, enabling organizations to use different signing algorithms while maintaining security through predefined algorithm suites and out-of-band confi
Read more
Report
Pro access
Upgrade to see all 37 mentions
Upgrade to a paid plan to read every media mention of this company - funding news, awards, product launches and press releases from all the outlets writing about it.
Every media mention and press release
Funding news, awards and product launches
Fresh coverage from every outlet writing about the company
Upgrade now
Cancel anytime. Secure checkout. Instant activation.