Independent assessment
Your stack, assessed by someone with nothing to gain.
The engine is free and verifies public evidence openly. An assessment covers what the free engine doesn't: your specific deployment, scoped and reported. We run the engine on your attestation evidence, produce a graded report with a C5:2026 mapping, and publish the finding either way. The independence is the point: a vendor can't grade its own confidential compute.
01
What you get
A full engine run against your evidence: attestation quotes, boot-time and runtime measurements, scored against the attack catalog.
02
What we publish
With your sign-off, a public badge: including a bad one, if that is what the evidence says. Findings that put people at risk are published regardless. We tell you this before you commit.
03
What if we find nothing?
We publish that too. "Nothing to see here" is a legitimate grade, and honesty does not get a discount.
Request an assessment
Tell us what you run and where. We reply with a scope, a timeline, and what the finding would mean. No price list yet: this is a conversation, not a checkout.