About

We’re building the registrar for the trust era.

Identity is infrastructure. We think it should be operated like one — provisioned, audited, and proven with signed receipts for every decision.

01 · By the numbers
471
Detectors
Machine-identity risk coverage
65
Integrations
12 categories · AWS + GitHub tested live
3 + 3
Clouds + code hosts
Across every plane identities live in
Open
Verifiable receipts
W3C VC · OSCAL · OCSF · did:key — offline-verifiable
02 · Values

What the institution stands for.

Security is a right, not a premium.
We ship a free, open-source scanner — MIT-licensed, no account required — that runs the same OIDC trust-policy detection in your terminal. Foundational machine-identity security shouldn’t be gated behind a budget.
Fixes, not findings.
The industry ships dashboards full of CVEs. We ship signed Terraform PRs. The point of the product is that issues close.
Trust needs a ledger.
Every other critical system has an audit trail. Identity decisions didn’t — until TrustFix. We think that’s the bug behind every breach postmortem.
Prove, don’t promise.
The trust scores, findings, and fixes you act on in TrustFix each click through to a signed receipt. Nothing you act on is a vibes-based claim — it’s a ledger entry.
03 · Thesis & bet
Why this, now
The NHI math broke.
For every human in a modern company there are 40–100 non-human identities. For every service account there will soon be 3–10 AI agents. Nobody built for this scale — so we did.
Our bet
Identity is infrastructure.
Operate it like one. Provision it like one. Audit it like one. We believe the winning vendor of the next decade of security is the one that makes non-human identity as boring and well-plumbed as DNS.
Our mission
The boring plumbing of trust.
We exist to make non-human identity as well-plumbed and well-audited as the rest of your infrastructure — every decision provisioned deliberately and proven with a signed receipt. That’s the work, and it’s the whole work.
Our promise
Read-only, human-approved, open source.
Read-only cloud access. Human approval for every fix. A free, open-source scanner anyone can run. These aren’t marketing constraints — they’re axioms the product was built around.
04 · Talk to us

Ready to operate identity like the infrastructure it is?

About | TrustFix