Stop hand-rolling
audit evidence.
GLBA, SOX, NYDFS 23 NYCRR 500, SOC 2 — and you're hand-rolling audit evidence every cycle. Attestree turns every install, update, and config change into a signed attestation, exported as an auditor-ready bundle.
- installMicrosoft.PowerToys0.81.1sig:9c4f…
- updateWindowsUpdate.KB5037768sig:1ab2…
- configCedar policy bundlerev-204sig:bd71…
- driverIntel.GraphicsCmd31.0.101sig:e45a…
- blockUnsigned.Installer (policy denied)deniedsig:0fa9…
- installchoco/firefox125.0.1sig:7c33…
On our horizon. Attestree is pre-GA and onboarding design partners. This page describes where we're heading for fleets at this scale — not a shipping product today. If that's you, come build it with us.
Three things regulated buyers ask us about first.
Auditor-ready evidence
Signed change-of-state attestations as a side effect of normal operations — evidence bundles designed to support GLBA and SOX evidence requirements, generate NYDFS 23 NYCRR 500.15 control attestations, and produce SOC 2 evidence.
Stream into your SIEM
An NDJSON-over-QUIC audit stream into Microsoft Sentinel and Splunk is scoped for v1 — Chronicle, QRadar, and Devo via the documented webhook schema. Until it lands, every state transition is already a signed span, exportable as a .tar.zst bundle your auditor verifies offline with no dependency on the platform.
On-prem appliance, by design
An on-prem appliance designed to bind keys to the vTPM for tenants that cannot run SaaS, with air-gapped evidence sync in the appliance design.
The products that map to your control catalog.
FinServ engagements start with the three products below. Drivers are part of the broader bundle and available on request.
Winget Enterprise
Attested install gates in front of every Windows package channel.
Read productTransforms
Cedar policy-as-code with signed evidence export.
Read productWindows Updates
Approve, stage, and attest every KB before deployment.
Read productCommercial — request access.
FinServ design partners get a dedicated solutions architect, a 90-day proof-of-evidence engagement, and an on-prem appliance designed to bind keys to the vTPM. We'll come back within two business days.
"Design partner pipeline open. Be first to be quoted."