FOR HOMELAB

Provenance for the box
you actually own.

You install software on your home boxes from six different package managers and have no idea what's actually running. Attestree gives you one inventory, real update rings, and signed provenance — free to run at home, early-access today.

Get early access Read the wedge

Apache-2.0 shim SYSTEM + user context winget + Chocolatey today more managers landing

FLEET INVENTORY · PREVIEW 847 artifacts

winget Microsoft.PowerToys

0.81.1 sig:9c4f…
scoop main/neovim

0.10.0 sig:1ab2…
choco firefox

125.0.1 sig:bd71…
npm @anthropic-ai/sdk

0.21.4 sig:e45a…
pip requests

2.31.0 sig:0fa9…
dotnet aspirate

0.10.0 sig:7c33…

local · postgres-backed verified

WHY THIS MATTERS HERE

Three things homelabbers ask us about first.

One inventory, every manager

Winget and Chocolatey today, with Scoop, npm, pip, .NET tools, and PowerShell Gallery landing as their collectors ship — unified into a single attested view of what is on your boxes.

Real update rings at home

Canary, pilot, and broad rings for driver updates without an enterprise license. Roll back from a single signed policy file.

Apache-2.0 installer shim

The Apache-2.0 shim that fronts every package manager: per-user apps install in the actual user’s profile, and a shared family PC converges them for every user. Public repo at launch.

WHAT YOU GET

The products you'll actually run on your bench.

Inventory and Windows Updates are first up. Driver rings follow. Everything starts on a single node and federates when you add more.

/products/inventory In dev

Inventory

One attested inventory across your package managers — winget and Chocolatey today, more as they land.

Read product

/products/drivers Pipeline

Drivers

Driver update rings with WHQL + provenance verification.

Read product

/products/windows-updates Pipeline

Windows Updates

Approve, stage, and attest every KB before deployment.

Read product

/products/winget-enterprise In dev

Winget Enterprise

Attested install gates in front of every Windows package channel.

Read product

ACCESS

Free Community Edition.

A free Community Edition Docker image — closed-source (EULA), 50-endpoint cap, early-access / pre-GA. Plus an Apache-2.0 installer shim you build from source.

Free Community Edition 50-endpoint cap Early access · pre-GA Apache-2.0 shim (OSS)

Docker · Community Edition · pre-GA

PS> docker compose up

# Free Community Edition — closed-source (EULA), 50-endpoint cap.

# Early access / pre-GA. Request access to pull the image.

Or: Apache-2.0 winget-system-shim — GitHub release · build-from-source (public repo lands M3–M6)