Is sigstore safe?
Review sigstore security risks.

The following security profile for sigstore includes the basics you’ll need for a vendor risk assessment: security certifications, supply chain details, privacy policy, terms of service, GDPR compliance, and more.

All Security Profiles

sigstore Organization Details

Headquarters

Hosting

Hosting locations

Security Program

Security Certifications

PCI Compliant

HIPAA Compliant

SOC 2 Compliant

GDPR Compliant

ISO 27001 Compliant

FedRamp Compliant

CSA Star Level 1
Compliant

Security Page

https://sigstore.dev/trust-security

Security Portal

Bug Bounty

Vulnerability Disclosure

Terms of Service

Privacy Policy

Status Page

https://status.sigstore.dev

Authentication

Authentication / SSO

Supported Okta Features

Supports SSO

Two-factor authentication via SMS

Two-factor authentication via E-mail

Two-factor authentication via Hardware

Two-factor authentication via Software

Two-factor authentication via TOTP

Two-factor authentication via U2F

OAuth Details

sigstore Supply Chain

Netlify
Better Uptime
GitHub
Google Workspace
Sonatype
Google Analytics

sigstore Subdomains

docs.sigstore.dev
search.sigstore.dev
status.sigstore.dev
www.sigstore.dev
blog.sigstore.dev

Regain control of SaaS security.

Nudge Security discovers all SaaS accounts ever created by anyone in your org within minutes of starting a free trial. Get a full SaaS inventory today, along with insights and automation to improve your SaaS security posture.

Try it free