Start with evidence. Build across your team.
Start with signed evidence. Add the platform to manage trust across repositories, developers, and agents. Choose a deployment that fits your team.
Security Essentials
Start collecting verifiable evidence from your software workflows.
- Signed evidence from your configured development and CI workflows
- Tamper-evident attestations that can be inspected and verified
- Existing test and scanning tools can supply evidence
- Unlimited read-only auditor seats
- 14-day free trial with no credit card required
Trial requires GitHub login. A GitHub organization admin installs the TestifySec app.
TestifySec Platform
For engineering and platform teams managing gates, evidence, and technical controls across repositories.
- Manage multiple Pushgate repository connections
- Manage gate requirements and review decisions
- Map technical test results to selected controls
- Inspect the evidence and signer behind a decision
- Manage developer and agent signing identities
- Follow code changes that may affect technical controls
Enterprise
Choose an architecture that fits your infrastructure, evidence boundary, and operational requirements.
- Discuss deployment in your environment
- Self-contained software appliance for single-host and evaluation use
- Production architecture tailored to your operational requirements
- Discuss key management and evidence storage options
- Confirm catalog coverage for your technical controls
- Deployment and support scope agreed with the team
Starting with a developer tool?
Install the open-source CI/lock CLI to record your first workflow, or compare Pushgate plans to protect repository pushes. Talk to us when you need the wider platform.
Plan your rollout.
What does the $65 price cover?
Security Essentials starts at $65 per user per month, billed annually. A user is a committer who pushed code in the last 90 days, plus additional seats you add. Read-only auditor seats are free. Contact us for platform and private deployment pricing.
How do we get started?
Book onboarding to agree your first workflow and evidence requirements. The 14-day Security Essentials trial requires GitHub login and a GitHub organization admin to install the TestifySec app. No credit card is required.
Is Pushgate priced separately?
Pushgate has its own plans for protecting repository pushes. Platform plans cover the wider team workflow: managing gates, policies, evidence, and technical control mappings. We will confirm the products and support included in your proposal.
Can we run the platform in our own environment?
Yes. The software appliance packages the platform for single-host operation. We will agree the deployment architecture, identity, storage, network access, availability, and support requirements with your team.
Do we need a paid platform plan to use CI/lock?
CI/lock is open source and can record and verify evidence independently. The platform brings gates, policies, evidence, and technical control mappings together for your team.
Support plans for every team.
Standard support is included with the TestifySec Platform. Premium and enterprise-grade plans add response-time SLAs, dedicated solutions architects, and consulting.
Included
Built into every Platform plan.
- Email + ticket support, 9×5 business hours
- Onboarding playbook and platform setup
- Access to documentation and pattern library
- Quarterly product reviews
Add-on
For teams operating critical software delivery workflows.
- 24×7 response with severity-based SLAs
- Named solutions architect and quarterly roadmap
- Policy and architecture consulting hours
- Witness, Archivista, and in-toto ecosystem support
Custom
For regulated, classified, and government programs.
- Custom SLAs and on-prem / air-gapped support
- Architecture review and deployment guidance
- Dedicated implementation engineering
- Bespoke training for your team and auditors