# About Trusta

Trusta is developer-first trust infrastructure. We build the systems that let a
software company prove its security posture is real — continuously, from
evidence, without a questionnaire in sight.

## What we do

Security review today runs on documents. A buyer asks for a SOC 2 report,
receives a PDF describing a point in time that has already passed, and files it.
Nothing in that exchange establishes whether the vendor's infrastructure is
secure right now. Trusta replaces that exchange with computed trust: collectors
actively verify a company's real infrastructure, each check produces a
timestamped signal, and those signals are evaluated deterministically into a
public trust page anyone can read and audit.

Every claim on a Trusta trust page traces back to the evidence and the
evaluation that produced it. Nothing is self-reported, nothing is inferred by a
model, and nothing is asserted without a signal behind it. Trust computation is
deterministic and auditable by design — that constraint is the product, not an
implementation detail.

## Who it is for

Trusta is built for engineering teams at startups who are losing deals to
security review, and for the buyers on the other side of those deals who need
something better than a PDF. If you have ever been asked "are you SOC 2
compliant?" three weeks into a sales cycle, Trusta is the answer you send
instead of a spreadsheet.

## How we build

Trusta runs as a small, explicit system: an API, deterministic workers that
evaluate control state, and published artifacts that never change once written.
Everything an agent or an auditor needs is machine-readable and reachable
without contacting us first:

- [OpenAPI 3.1 specification](https://trusta.dev/openapi.json)
- [MCP server](https://api.trusta.dev/mcp) (Streamable HTTP)
- [llms.txt](https://trusta.dev/llms.txt)
- [Agent instructions](https://trusta.dev/agent-instructions.md)
- Public trust endpoints that require no authentication

## Contact

- General enquiries: <hello@trusta.dev>
- Security reports: <security@trusta.dev>
- Full list: [contact page](https://trusta.dev/contact)
- Integrating: [developer portal](https://trusta.dev/developers)