in-toto

A framework to secure the integrity of software supply chains

Supply chain compromises are becoming a frequent occurrence. In-toto can help you protect your software supply chain.

in-toto is an open metadata standard that you can implement in your software's supply chain toolchain.

You can use in-toto today by using your MIT-licensed library and tools.

Tools

Get started today designing an in-toto layout using our web layout tool.