Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

We instill trust and integrity throughout the software development life cycle by offering comprehensive, cryptographically verifiable tracking and provenance for all artifacts, actions, and dependencies, seamlessly and at scale. Our solution leverages the open-source immudb to provide a high-speed, immutable storage option. It integrates effortlessly with your current programming languages and CI/CD processes. With Codenotary Cloud, every company, developer, automation engineer, and DevOps professional can secure all phases of their CI/CD pipeline. Utilizing Codenotary Cloud® allows you to construct immutable, tamper-resistant solutions that satisfy auditor requirements as well as relevant regulations and laws. The Codenotary Trustcenter empowers any company, developer, automation engineer, or DevOps engineer to enhance the security of their CI/CD pipeline stages. Furthermore, the attestation process, which includes notarization and authentication of each step in the pipeline, along with the results from vulnerability scanners, is handled through a tamper-proof and immutable service, enabling compliance with Level 3 and 4 of the Supply-chain Levels for Software Artifacts (SLSA). This robust framework not only enhances security but also promotes accountability and transparency in the software development process.

Description

Keyfactor Signum ensures the safeguarding of sensitive keys, automates policy enforcement, and seamlessly integrates signing processes with your existing tools and build workflows. It allows for the generation and secure storage of private signing keys within a centralized, FIPS 140-2 certified hardware security module (HSM) hosted in the cloud. You can establish detailed access and usage policies for these private keys while also authenticating users and build servers involved in the signing process, all accompanied by a comprehensive audit trail. The solution works with platform-native signing tools to maintain the security of private signing keys without disrupting existing workflows. Additionally, it facilitates integration with signing tools through lightweight agents compatible with Windows and Linux, which can be quickly deployed on build servers or developer workstations. Furthermore, Keyfactor Signum generates key attestation to meet CA/B forum standards, ensuring that keys are both created and stored within an HSM, thereby enhancing security and compliance. This robust system not only streamlines the signing process but also significantly reduces the risk of key compromise.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Jenkins
CycloneDX
Docker
Git
GitHub
GitLab
Google
Java
Kubernetes
Microsoft Azure
Okta
OpenSSL
PowerShell
Travis CI
Visual Studio

Integrations

Jenkins
CycloneDX
Docker
Git
GitHub
GitLab
Google
Java
Kubernetes
Microsoft Azure
Okta
OpenSSL
PowerShell
Travis CI
Visual Studio

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Codenotary

Founded

2018

Country

United States

Website

codenotary.com

Vendor Details

Company Name

Keyfactor

Founded

2001

Country

United States

Website

www.keyfactor.com/products/signum/

Product Features

Continuous Delivery

Application Lifecycle Management
Application Release Automation
Build Automation
Build Log
Change Management
Configuration Management
Continuous Deployment
Continuous Integration
Feature Toggles / Feature Flags
Quality Management
Testing Management

Continuous Integration

Build Log
Change Management
Configuration Management
Continuous Delivery
Continuous Deployment
Debugging
Permission Management
Quality Assurance Management
Testing Management

Product Features

Alternatives

BMC Compuware ISPW Reviews

BMC Compuware ISPW

BMC Software

Alternatives

jarsigner Reviews

jarsigner

Oracle
CodeSign Secure Reviews

CodeSign Secure

Encryption Consulting LLC
CodeSign Reviews

CodeSign

Aujas