FOR DEVELOPER-LED SOFTWARE TEAMS

CLEAR SCOPE. DATED EVIDENCE.

Security evidence for customer reviews.

Give buyers clear answers, with evidence behind them.
Connect your repositories and supported infrastructure, track security checks, and share dated results in one trust center.

Create your trust centerSee a buyer review
Acme / Trust centerILLUSTRATIVE DATA

SECURITY INFORMATION

Acme Workspace

Security questions, answered with published evidence.

EXAMPLE PUBLICATION 042
AUTOMATED CHECKCheck failed

An authentication check needs attention.

The source scan flagged one API route without a recognized authentication check. This result does not assess every production access path.

Coverage
Acme Workspace / web application
Last observed
Supporting evidence

Method: Repository scan, revision 8f4c2d1

Observation: One route needs review.

Freshness window ends: 2026-09-15T09:42:00Z

This example is not an independent assessment or a certification.

Open in this example: Authentication check failed. Evidence outdated.
Scope and dates stay attached to every result.API & technical details

BUILT TO ANSWER

01What does this cover?

02What needs attention?

03Can I review the evidence?

01 / DATES MATTER

A check result.
An observation date.

A passing result describes what was observed, not a permanent guarantee. Trusta tracks evidence freshness so an old result does not stand in for a current check.

Check passed

WITHIN THE FRESHNESS WINDOW

The observed evidence supports this specific check.

Evidence outdated

FRESHNESS WINDOW EXPIRED

The evidence is no longer current.

Not established

INSUFFICIENT EVIDENCE

A missing signal is not proof that a protection exists.

  • VERSIONED PUBLICATIONS
  • EXPLICIT EVALUATION RULES
  • VISIBLE GAPS AND LIMITATIONS

02 / ONE RECORD. TWO WAYS TO READ IT.

Clear answers.
Supporting evidence.

Start with the questions a buyer asks. Keep the scope, check results and dates available for a deeper security review.
Technical teams can also read published results through the API and MCP.

FOR PEOPLE / EXAMPLE

Acme Workspace

v042

An authentication check needs attention

Check failed

OBSERVED 07 SEP 2026, 09:42 UTC

Understand the finding and its covered scope.
Review the observation date and freshness window.

View the public trust center

FOR AGENTS & SCRIPTS

GET /trust/acme-api/trust.json
{
  "version": 42,
  "controls": [{
    "state": "fail",
    "latestEvidenceAt": "2026-09-07T09:42:00Z",
    "freshUntil": "2026-09-14T09:42:00Z"
  }]
}

SELECTED PUBLICATION FIELDS / ILLUSTRATIVE DATA

Read the developer docs

03 / START WITH THE STACK YOU HAVE

A security team
isn't a prerequisite.

Connect supported sources, run the checks, and publish your results. Organize the buyer conversation around security questions, with technical details available underneath.

$ npx trusta init

Read the setup guide

PRIVATE DOCUMENTS / EXAMPLE

Penetration test report

Public evidence stays inspectable.
Sensitive reports stay under your control.

VIEWER
Security reviewer
NDA
Current version signed
ACCESS
Awaiting owner approval
ILLUSTRATIVE WORKFLOW

04 / USEFUL FROM THE FIRST REPOSITORY

Start proving.
Grow when you're ready.

Free for one organization and two repositories.
More capacity for $19 a month.

Free

$0 FOREVER

1 organization · 2 repositories

  • Evidence-backed trust center
  • Infrastructure checks + security scanner
  • GitHub Actions integration
  • Viewer access management
Create your free trust center

Growth

$19 / MONTH

More organizations · more repositories

  • Everything in Free
  • More capacity for your growing team
Start with Growth

THE NEXT BUYER WILL ASK. BE READY.

Give them evidence
they can inspect.

Create your trust center

Free for 1 org and 2 repos. No credit card.