Companies and open-source projects whose products prove, or rely on proof of, what their systems run. Each entry links its public source.
Compiled from public sources. Listing implies no relationship, endorsement or assessment of any company. Corrections and additions: [email protected].
Related service: Attested AI
Why re-attestation matters here: Users are asked to trust a remote AI service; each deployment of new code or weights needs fresh, publicly checkable attestation evidence.
Why re-attestation matters here: Confidential inference trusts a measured CPU+GPU stack; driver, firmware or model updates change the measurements a client must re-verify.
Apple's server-side system for running larger Apple Intelligence models with privacy guarantees that researchers can inspect.
Attests or relies on: Attested node software images published to a transparency log
Source: security.apple.com, checked 2026-11-11
Microsoft Azure guidance and services for protecting data and model IP during training, fine-tuning and inference.
Attests or relies on: Confidential VMs and confidential GPUs with attestation
Source: learn.microsoft.com, checked 2026-11-11
Provider of EscrowAI, a platform for running AI on protected healthcare data held by data owners.
Attests or relies on: Confidential-computing enclaves protecting both algorithm and data
Source: beekeeperai.com, checked 2026-11-11
Provider of a verifiably private inference API and the OpenPCC open standard for private AI inference.
Attests or relies on: Client-verifiable attestation of inference nodes
Source: confident.security, checked 2026-11-11
Open framework for deploying confidential AI and containerised apps inside TEEs.
Attests or relies on: Intel TDX and GPU TEE quotes, key release after attestation
TEE workloads restart, migrate and get patched; relying parties need re-attestation after each change and appraisal policies that track new reference values.
Source: github.com, checked 2026-11-11
Google's cloud platform for running Gemini-based features on personal data inside a sealed, privacy-preserving environment.
Attests or relies on: Remote attestation of sealed TEE-based compute
Source: blog.google, checked 2026-11-11
Developer of BlindLlama, AICert and related tooling for confidential and verifiable AI.
Attests or relies on: GPU TEE attestation; verifiable training provenance
Source: mithrilsecurity.io, checked 2026-11-11
Private AI inference platform serving open-weight models from TEEs with hardware-signed proofs.
Attests or relies on: TEE-hosted models returning hardware-signed attestation with responses
Source: near.ai, checked 2026-11-11
GPU-level confidential computing for data-center GPUs that keeps data and models protected while in use.
Attests or relies on: GPU TEE attestation reports (GPU firmware and driver measurements)
Source: nvidia.com, checked 2026-11-11
Encrypted AI service from Edgeless Systems that keeps prompts encrypted during processing.
Attests or relies on: End-to-end remote attestation of the inference backend
Source: privatemode.ai, checked 2026-11-11
Platform for running models and data pipelines in hardware-sealed environments on NVIDIA, Intel and AMD hardware.
Attests or relies on: CPU and GPU TEE attestation across clouds
Source: superprotocol.com, checked 2026-11-11
Security research lab building an AI cloud for private, verifiable inference on hardware enclaves.
Attests or relies on: Secure-enclave (CPU+GPU TEE) attestation verified by the client
Source: tinfoil.sh, checked 2026-11-11
Meta's confidential-computing design for running AI features on WhatsApp messages without exposing them to Meta.
Attests or relies on: TEE attestation anchored in a hardware root of trust; verifiable binaries
Source: engineering.fb.com, checked 2026-11-11
Related service: Attested AI agents
Why re-attestation matters here: Agent-to-agent and tool calls cross trust boundaries; binding identity to verified runtime state is an open design question for these protocols.
Why re-attestation matters here: Agent credentials are short-lived and agents are redeployed often, so proof of which workload holds an identity must be renewed, not issued once.
Open standard, originated by Google and hosted by the Linux Foundation, for interoperability between AI agents.
Attests or relies on: Agent cards and authenticated agent-to-agent calls
Source: a2a-protocol.org, checked 2026-11-11
Identity and access control plane for AI agents and workloads, keeping credentials out of agents.
Attests or relies on: Workload attestation (cloud and platform identity) before credential issuance
Source: aembit.io, checked 2026-11-11
Identity security platform for discovering and governing AI agents, MCP servers and non-human identities.
Attests or relies on: Agent and NHI identity inventory and least-privilege controls
Source: astrix.security, checked 2026-11-11
Okta's Auth0 offering for adding authentication and authorization to AI agents.
Attests or relies on: OAuth-based agent identity and delegated authorization
Source: auth0.com, checked 2026-11-11
Platform for securing non-human identities, AI agents and secrets across environments.
Attests or relies on: NHI and secret lifecycle governance
Source: clutch.security, checked 2026-11-11
Customer and agentic identity platform covering users, partners, AI agents and MCP servers.
Attests or relies on: OAuth identity for agents and MCP servers
Source: descope.com, checked 2026-11-11
Runtime authorization for AI agents, giving each agent its own identity and scoped authority.
Attests or relies on: Per-agent identity and policy-bound access tokens
Source: keycard.ai, checked 2026-11-11
Microsoft's identity framework for registering, governing and securing AI agents.
Attests or relies on: Directory-issued agent identities
Source: learn.microsoft.com, checked 2026-11-11
Open protocol for connecting AI applications to tools and data sources.
Attests or relies on: OAuth-based authorization between MCP clients and servers
Source: modelcontextprotocol.io, checked 2026-11-11
Non-human identity management platform with agentic access management; site states it has been acquired by Cyera.
Attests or relies on: NHI inventory, ownership and access governance
Source: oasis.security, checked 2026-11-11
Identity-aware proxy for zero-trust access that evaluates each request from users, services and AI agents.
Attests or relies on: Per-request identity and context checks, including device posture
Source: pomerium.com, checked 2026-11-11
Runtime machine IAM for AI agents and workloads, offering SPIFFE-based identity without running SPIRE.
Attests or relies on: SPIFFE identities bound to kernel-level workload attestation
Workload identities rotate on short lifetimes; each re-issuance is a point where platform or runtime attestation can be re-checked.
Source: riptides.io, checked 2026-11-11
Cloud and agentic infrastructure vendor behind agentgateway, kagent and enterprise Istio.
Attests or relies on: Workload identity and mTLS for agent and tool traffic
Source: solo.io, checked 2026-11-11
Security platform for AI agents and non-human identities.
Attests or relies on: Agent and machine identity discovery and governance
Source: token.security, checked 2026-11-11
Related service: AI passport
Why re-attestation matters here: Each of these records one fact about a model: who signed it, what it was built from, how it is described. A passport joins those facts and keeps them current when the model changes.
Coalition for Content Provenance and Authenticity: a standard for verifying the source of media content.
Attests or relies on: Signed provenance for content, including content produced by AI
Source: c2pa.org, checked 2026-11-12
Industry coalition working on the security of AI systems.
Source: coalitionforsecureai.org, checked 2026-11-12
Machine learning bill of materials in the CycloneDX standard.
Attests or relies on: A machine-readable list of the models and datasets a system is built from
Source: cyclonedx.org, checked 2026-11-12
Documentation format that describes a model on the Hugging Face Hub.
Attests or relies on: A declared description of a model, its training data and its limits
Source: huggingface.co, checked 2026-11-12
Open Source Security Foundation project for signing machine learning models.
Attests or relies on: Signatures over model files, so a model can be traced to its publisher
Source: openssf.org, checked 2026-11-12
Sigstore project for supply chain security of machine learning models.
Attests or relies on: Signing and verification of models with Sigstore
Source: github.com, checked 2026-11-12
Open standard for personal data stores that users control.
Source: solidproject.org, checked 2026-11-12
AI work area of the SPDX bill-of-materials standard.
Attests or relies on: Bill-of-materials fields for AI models and datasets
Source: spdx.dev, checked 2026-11-12
Related service: Attested AI agents
Why re-attestation matters here: Each agent gets its own machine, created in seconds and by the thousand. Whoever buys those agents has to know what every machine runs, and that it has not changed since it was approved.
Cloud sandbox for agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Infrastructure for autonomous agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Cloud virtual machines for agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Cloudflare's sandbox environments for running code.
Source: developers.cloudflare.com, checked 2026-11-12
Cloud desktops for agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Persistent computers for AI agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Virtual machines for AI agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Open-source infrastructure for AI agents to use the internet. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Cloud machines for agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Managed cloud for AI agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Open-source microVM sandboxes for AI agents.
Source: microsandbox.dev, checked 2026-11-12
Runtime platform for autonomous software.
Source: northflank.com, checked 2026-11-12
Virtual machines for long-running agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
An operating system for AI agents. Y Combinator company.
Source: ycombinator.com, checked 2026-11-12
Vercel's sandbox for running untrusted and AI-generated code.
Source: vercel.com, checked 2026-11-12
Related service: Attested robots
Why re-attestation matters here: Robot and vehicle fleets receive OTA updates; each update changes the measured state that a verifier or fleet operator must re-check.
Why re-attestation matters here: Every OTA update or rollback changes device software state, so device identity and update provenance must be re-established afterwards.
AI and robotics company building the NEO humanoid home robot.
Source: 1x.tech, checked 2026-11-11
Maker of Digit, a humanoid robot designed for industrial and logistics work.
Source: agilityrobotics.com, checked 2026-11-11
Maker of the ANYmal legged robot and software for autonomous industrial inspection.
Source: anybotics.com, checked 2026-11-11
Humanoid robotics company targeting goods-to-person, kitting and inspection tasks.
Source: apptronik.com, checked 2026-11-11
Provider of AuterionOS and Skynode, a software platform for autonomous drones and robots.
Source: auterion.com, checked 2026-11-11
Robotics company known for the Spot mobile robot used in industrial inspection.
Source: bostondynamics.com, checked 2026-11-11
Robotics company building the Figure 03 general-purpose humanoid robot and its Helix AI model.
Source: figure.ai, checked 2026-11-11
Open-source flight control software for drones and other unmanned vehicles, part of the Dronecode ecosystem.
Attests or relies on: Firmware integrity on flight controllers (category-level)
Source: docs.px4.io, checked 2026-11-11
Connected vehicle platform for OTA updates, data logging and remote commands on software-defined vehicles.
Attests or relies on: Signed OTA update delivery to vehicle ECUs
Source: sibros.tech, checked 2026-11-11
Maker of autonomous drones for first response, infrastructure inspection and national security.
Source: skydio.com, checked 2026-11-11
Secure software update framework designed for the automotive industry.
Attests or relies on: Signed update metadata and ECU version reports
Source: uptane.org, checked 2026-11-11
Autonomous driving company operating a driverless ride-hailing service.
Source: waymo.com, checked 2026-11-11
Developer of end-to-end embodied AI for assisted and automated driving.
Source: wayve.ai, checked 2026-11-11
Maker of VTOL survey drones and an end-to-end aerial mapping workflow.
Source: wingtra.com, checked 2026-11-11
Related service: Attested devices
Why re-attestation matters here: Field devices reboot, update firmware and lose connectivity; attestation evidence must be refreshed across that lifecycle, not only at provisioning.
Why re-attestation matters here: Every OTA update or rollback changes device software state, so device identity and update provenance must be re-established afterwards.
Azure IoT Hub Device Provisioning Service flow that provisions devices using TPM-based attestation.
Attests or relies on: TPM endorsement key based device attestation
Source: learn.microsoft.com, checked 2026-11-11
IoT fleet platform (balenaCloud, balenaOS, openBalena) for deploying and managing device software.
Attests or relies on: Fleet OTA updates and device management
Source: balena.io, checked 2026-11-11
IoT security company focused on scalable device identity and provisioning.
Attests or relies on: Silicon-derived device identity (category-level)
Source: cryptoquantique.com, checked 2026-11-11
Provider of KeyScaler, a machine identity platform for OT, connected products and infrastructure.
Attests or relies on: Automated device identity and credential lifecycle
Source: deviceauthority.com, checked 2026-11-11
Platform for building and managing secure IoT and edge device software (FoundriesFactory).
Attests or relies on: Secure boot and signed OTA updates
Source: foundries.io, checked 2026-11-11
IoT security and services business offering secure-by-design solutions and asset tracking.
Attests or relies on: Device identity and secure provisioning (category-level)
Source: kudelski-iot.com, checked 2026-11-11
Medical device cybersecurity company focused on FDA premarket submissions.
Attests or relies on: Device security and SBOM evidence for regulators
Source: medcrypt.com, checked 2026-11-11
OTA software update platform for embedded Linux and RTOS IoT devices.
Attests or relies on: Signed OTA artifacts and robust rollback
Source: mender.io, checked 2026-11-11
Secure element family providing a hardware root of trust for IoT devices.
Attests or relies on: Secure-element key storage and device attestation
Source: nxp.com, checked 2026-11-11
IoT security assurance framework and certification scheme.
Attests or relies on: PSA attestation tokens and certified roots of trust
Standards define evidence formats and roles; lifecycle events such as reboot, update and key rotation are where implementations must re-attest.
Source: psacertified.org, checked 2026-11-11
Reference secure-world software for Arm Cortex-A and Cortex-M (TF-A, TF-M).
Attests or relies on: Measured boot and PSA initial attestation tokens
Source: trustedfirmware.org, checked 2026-11-11
Identity-first zero trust platform for IT, OT, cloud and AI environments.
Attests or relies on: Identity-based access for OT assets
Source: xage.com, checked 2026-11-11
Edge orchestration platform for deploying and managing applications and AI across distributed sites.
Attests or relies on: Edge node identity and measured boot (category-level)
Source: zededa.com, checked 2026-11-11
Maker of hardware security modules and secure edge nodes for Linux edge devices.
Attests or relies on: Hardware-backed keys and secure boot on edge devices
Source: zymbit.com, checked 2026-11-11
Related service: Attested cloud workloads
Why re-attestation matters here: TEE workloads restart, migrate and get patched; relying parties need re-attestation after each change and appraisal policies that track new reference values.
Why re-attestation matters here: Standards define evidence formats and roles; lifecycle events such as reboot, update and key rotation are where implementations must re-attest.
Why re-attestation matters here: Attestation services must keep reference values and policies current as firmware and TCB versions change, so results stay meaningful over time.
AMD Secure Encrypted Virtualization technologies (SEV, SEV-ES, SEV-SNP) for confidential VMs.
Attests or relies on: SEV-SNP attestation reports (VCEK-signed)
Source: amd.com, checked 2026-11-11
Confidential computing software for running applications and AI agents inside TEEs.
Attests or relies on: TEE attestation for workloads and agents
Source: anjuna.io, checked 2026-11-11
Armv9-A security feature providing isolated Realms for confidential workloads.
Attests or relies on: CCA platform and realm attestation tokens
Source: arm.com, checked 2026-11-11
Isolated compute environments carved from EC2 instances for processing sensitive data.
Attests or relies on: Nitro attestation documents with PCR measurements
Source: aws.amazon.com, checked 2026-11-11
Linux Foundation community promoting confidential computing through open collaboration.
Attests or relies on: Hosts attestation-related open-source projects and SIGs
Source: confidentialcomputing.io, checked 2026-11-11
CNCF project for deploying cloud-native workloads inside confidential VMs and enclaves.
Attests or relies on: Trustee attestation service and key broker
Source: confidentialcontainers.org, checked 2026-11-11
Confidential computing vendor behind Contrast, Constellation, MarbleRun and Privatemode AI.
Attests or relies on: Confidential container and cluster attestation (SEV-SNP/TDX)
Source: edgeless.systems, checked 2026-11-11
Confidential cloud computing vendor with platforms for confidential workloads, virtual HSM and AI.
Attests or relies on: Confidential VM and container attestation
Source: enclaive.io, checked 2026-11-11
Data security company offering confidential AI, confidential computing management and key management.
Attests or relies on: Attestation-gated key release; Confidential Containers support
Source: fortanix.com, checked 2026-11-11
Google Cloud portfolio of confidential VMs and related services that encrypt data in use.
Attests or relies on: Confidential VM (SEV, SEV-SNP, TDX) attestation
Source: cloud.google.com, checked 2026-11-11
Google Cloud environment for sharing sensitive data with an agreed workload while data owners keep control.
Attests or relies on: Attestation tokens gating key release to workloads
Source: docs.cloud.google.com, checked 2026-11-11
Library OS for running unmodified applications in Intel SGX enclaves.
Attests or relies on: SGX quotes, with a certificate-based attested TLS library
Source: gramineproject.io, checked 2026-11-11
IBM offering (formerly Hyper Protect) for running containers with hardware-level isolation on IBM Z and LinuxONE.
Attests or relies on: Secure Execution attestation on IBM Z
Source: ibm.com, checked 2026-11-11
IETF working group defining the Remote ATtestation procedureS architecture and formats.
Attests or relies on: RATS architecture (RFC 9334), EAT, CoRIM
Source: datatracker.ietf.org, checked 2026-11-11
Intel technology that isolates virtual machines as hardware-protected trust domains.
Attests or relies on: TDX quotes (MRTD/RTMR measurements)
Source: intel.com, checked 2026-11-11
Independent attestation service for confidential computing workloads across cloud, on-premises and hybrid.
Attests or relies on: Intel TDX/SGX and NVIDIA GPU attestation verification
Source: docs.trustauthority.intel.com, checked 2026-11-11
Azure service for attesting trusted execution environments and returning signed tokens.
Attests or relies on: SGX, SEV-SNP and TPM evidence appraisal
Source: learn.microsoft.com, checked 2026-11-11
Library OS for running applications inside secure enclaves.
Attests or relies on: SGX enclave attestation
Source: occlum.io, checked 2026-11-11
Open-source SDK offering a common API for building TEE applications across enclave technologies.
Attests or relies on: Enclave evidence generation and verification APIs
Source: openenclave.io, checked 2026-11-11
Google-originated project for meaningful control of data in distributed systems using TEEs.
Attests or relies on: Transparent, attested server binaries and remote attestation
Source: github.com, checked 2026-11-11
Provider of SCONE, a secure container environment for confidential cloud-native computing.
Attests or relies on: Enclave attestation and configuration/secret provisioning
Source: scontain.com, checked 2026-11-11
Project building components for attestation verification services.
Attests or relies on: Evidence appraisal using CoRIM/EAT and reference values
Source: github.com, checked 2026-11-11
Related service: Attested cloud workloads
Why re-attestation matters here: Workload identities rotate on short lifetimes; each re-issuance is a point where platform or runtime attestation can be re-checked.
Open-standards workload identity platform for cloud workloads and AI agents; site notes Keyfactor's intent to acquire it.
Attests or relies on: SPIFFE workload identity and federation
Source: cofide.io, checked 2026-11-11
Non-human IAM platform issuing short-lived identities to workloads, AI agents and automation on open standards.
Attests or relies on: SPIFFE-based short-lived workload credentials
Source: defakto.security, checked 2026-11-11
Open-source service mesh providing mTLS, workload identity and traffic policy for Kubernetes.
Attests or relies on: SPIFFE-format workload certificates for mTLS
Source: istio.io, checked 2026-11-11
Device identity platform issuing hardware-backed, short-lived certificates to devices, workloads and AI agents.
Attests or relies on: ACME Device Attestation (hardware key attestation)
Source: smallstep.com, checked 2026-11-11
CNCF standard (SPIFFE) and reference implementation (SPIRE) for issuing cryptographic identities to workloads.
Attests or relies on: SVIDs issued after node and workload attestation
Source: spiffe.io, checked 2026-11-11
Identity platform unifying human, machine and AI identities for infrastructure access.
Attests or relies on: Machine and workload identity; device trust with TPM-backed attestation
Source: goteleport.com, checked 2026-11-11
Related service: Attested software supply chain
Why re-attestation matters here: Build provenance attests how an artifact was made; runtime attestation is the complementary check that the deployed artifact is what is actually running.
Provider of hardened open-source container images, language libraries and VM images.
Attests or relies on: Signed images with SBOMs and provenance
Source: chainguard.dev, checked 2026-11-11
GitHub Actions feature for generating and verifying build provenance for artifacts.
Attests or relies on: Sigstore-signed SLSA build provenance
Source: docs.github.com, checked 2026-11-11
Project that aggregates software supply chain metadata into a queryable graph.
Attests or relies on: Ingests SBOMs, SLSA provenance and attestations
Source: guac.sh, checked 2026-11-11
Framework for securing the integrity of software supply chains.
Attests or relies on: Signed attestations of supply-chain steps
Source: in-toto.io, checked 2026-11-11
Software supply chain security platform building a dependency graph from builds for regulated companies.
Attests or relies on: Dependency graph with auditor-checkable evidence
Source: kusari.dev, checked 2026-11-11
Open-source project for signing and verifying software artifacts.
Attests or relies on: Keyless signatures and transparency log entries
Source: sigstore.dev, checked 2026-11-11
Security framework of standards and controls for software supply chain integrity.
Attests or relies on: Build provenance levels
Source: slsa.dev, checked 2026-11-11
Platform for collecting signed evidence and enforcing gates on human- and AI-written code.
Attests or relies on: Signed execution evidence (in-toto/Witness lineage)
Source: testifysec.com, checked 2026-11-11
Tool for generating in-toto attestations across a software supply chain.
Attests or relies on: in-toto attestations of build steps
Source: witness.dev, checked 2026-11-11
Related service: Attested devices
Why re-attestation matters here: A root of trust anchors measured boot; firmware updates and TCB recovery change measurements and certificates that verifiers must accept or reject.
Why re-attestation matters here: Standards define evidence formats and roles; lifecycle events such as reboot, update and key rotation are where implementations must re-attest.
Semiconductor company offering AI-driven platform security controllers for data centers and networks.
Attests or relies on: Hardware platform root of trust
Source: axiado.com, checked 2026-11-11
CHIPS Alliance project providing IP and firmware for an integrated silicon root of trust.
Attests or relies on: DICE-based measurement and identity for SoCs
Source: github.com, checked 2026-11-11
Infineon's family of TCG-standard trusted platform modules.
Attests or relies on: TPM 2.0 quotes and endorsement keys
Source: infineon.com, checked 2026-11-11
CNCF project for scalable TPM-based remote boot attestation and runtime integrity monitoring.
Attests or relies on: TPM quotes, measured boot and IMA runtime measurements
Field devices reboot, update firmware and lose connectivity; attestation evidence must be refreshed across that lifecycle, not only at provisioning.
Source: keylime.dev, checked 2026-11-11
FPGA-based platform firmware resiliency solutions aligned with NIST SP 800-193.
Attests or relies on: Firmware protection, detection and recovery
Source: latticesemi.com, checked 2026-11-11
Not-for-profit steward of the Ibex CPU and the OpenTitan root of trust.
Attests or relies on: Open silicon RoT designs
Source: lowrisc.org, checked 2026-11-11
Open-source reference design for a silicon root of trust.
Attests or relies on: Silicon RoT secure boot and attestation
Source: opentitan.org, checked 2026-11-11
Maker of ProvenCore, a formally verified microkernel and TEE operating system; also offers identity and payment wallet applications.
Attests or relies on: A trusted execution environment operating system that secure boot and device attestation can build on
Source: provenrun.com, checked 2026-11-12
Catalog of silicon IP roots of trust for SoC security.
Attests or relies on: Hardware RoT IP for secure boot and attestation
Source: rambus.com, checked 2026-11-11
TCG group specifying the Device Identifier Composition Engine for layered device identity.
Attests or relies on: DICE layered certificates and measurements
Source: trustedcomputinggroup.org, checked 2026-11-11
Linux community implementing TCG TSS2 APIs and TPM 2.0 tooling.
Attests or relies on: TPM quotes and event logs
Source: github.com, checked 2026-11-11
Standards body for vendor-neutral, hardware-anchored trusted computing specifications.
Attests or relies on: TPM, DICE and related attestation specs
Source: trustedcomputinggroup.org, checked 2026-11-11
Company commercialising open-source silicon with verifiable security and device management.
Attests or relies on: Supply-chain provisioning and below-OS fleet management
Source: zerorisc.com, checked 2026-11-11
Related service: Continuous compliance
Why re-attestation matters here: Continuous compliance collects evidence on a schedule; hardware-backed attestation can provide machine-verifiable evidence of system state between audits.
Enterprise GRC platform built on a compliance data engine and agentic AI.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: anecdotes.ai, checked 2026-11-11
Trust management platform automating compliance, risk and continuous evidence collection.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: drata.com, checked 2026-11-11
GRC platform for risk management, continuous compliance and audit evidence.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: hyperproof.io, checked 2026-11-11
Continuous controls monitoring platform for cyber GRC.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: regscale.com, checked 2026-11-11
Compliance automation platform with AI-assisted GRC.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: scrut.io, checked 2026-11-11
Compliance automation platform backed by expert support.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: secureframe.com, checked 2026-11-11
Trust platform for compliance, risk and GRC automation.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: sprinto.com, checked 2026-11-11
Compliance automation and continuous GRC platform for SOC 2, ISO 27001, HIPAA and other frameworks.
Attests or relies on: Automated control evidence from cloud and IT systems
Source: vanta.com, checked 2026-11-11
Related service: Attested cloud workloads
Why re-attestation matters here: On-chain verification of TEE quotes must handle TCB updates, revoked keys and node restarts, so attestation is checked repeatedly rather than once.
Provider of TEE attestation tooling for Web3 and AI, including on-chain DCAP verification.
Attests or relies on: On-chain Intel DCAP quote verification
Source: ata.network, checked 2026-11-11
Protocol for executing applications on protected data with hardware-enforced confidentiality.
Attests or relies on: TEE task attestation with on-chain proof
Source: iex.ec, checked 2026-11-11
Open-source infrastructure for confidential, verifiable execution of crypto transactions and AI workloads.
Attests or relies on: Confidential hardware execution with verifiable permissions
Source: litprotocol.com, checked 2026-11-11
Verifiable computing protocol with TEE-based (Oyster) and ZK-based coprocessors.
Attests or relies on: TEE enclave attestation for serverless coprocessors
Source: marlin.org, checked 2026-11-11
Network for building verifiable apps, including private DeFi and AI agents.
Attests or relies on: TEE-based confidential runtimes and attested off-chain logic
Source: oasis.net, checked 2026-11-11
Confidential AI cloud on TEE-protected GPUs and CPUs, the main sponsor of dstack.
Attests or relies on: Intel TDX and NVIDIA GPU TEE attestation, verifiable on-chain
Source: phala.com, checked 2026-11-11
Blockchain describing itself as a confidential computing layer for applications on encrypted data.
Attests or relies on: Hardware TEE attestation of network nodes
Source: scrt.network, checked 2026-11-11
Wallet and key management infrastructure, with a verifiable cloud offering.
Attests or relies on: Secure-enclave key management with verifiable execution
Source: turnkey.com, checked 2026-11-11
Related service: Attested wallets and digital identity
Why re-attestation matters here: A wallet provider vouches for each wallet unit and its keys. Every change to the app, the phone or the key store is a reason to check that statement again.
Android platform feature for verifying hardware-backed key pairs.
Attests or relies on: A certificate chain that shows a key is held in secure hardware and reports the device's state
Source: developer.android.com, checked 2026-11-12
Apple platform service that lets a server check requests come from a genuine instance of an app.
Attests or relies on: A hardware-backed key that asserts the integrity of an app instance
Source: developer.apple.com, checked 2026-11-12
Cryptographic software company.
Source: cryptomathic.com, checked 2026-11-12
The European Commission's open-source wallet reference implementation and the Architecture and Reference Framework it follows.
Attests or relies on: Wallet Unit Attestation and key attestation as specified in the Architecture and Reference Framework
Source: github.com, checked 2026-11-12
Published architecture blueprint for the EUDI Wallet ecosystem in Germany.
Attests or relies on: Describes wallet attestation flows for the national wallet
Source: bmi.usercontent.opencode.de, checked 2026-11-12
Digital wallet and credential infrastructure provider; documents Wallet Unit Attestation.
Attests or relies on: Wallet Unit Attestation documentation and playground
Source: docs.igrant.io, checked 2026-11-12
Trust services and signing technology provider; writes on EUDI wallets.
Source: intesigroup.com, checked 2026-11-12
Provider of EUDI Wallet connector software for organisations.
Source: lissi.id, checked 2026-11-12
Trust services and digital transaction provider.
Source: namirial.com, checked 2026-11-12
Linux Foundation project that hosts open-source components for digital wallets.
Source: openwallet.foundation, checked 2026-11-12
Maker of Procivis One, software for digital identity, credentials and wallets.
Source: procivis.ch, checked 2026-11-12
Mobile app protection company; writes on runtime trust in the EU wallet architecture.
Source: promon.io, checked 2026-11-12
Digital identity and trust services platform.
Source: signicat.com, checked 2026-11-12
Digital trust and credential software company.
Source: sphereon.com, checked 2026-11-12
The Swiss Confederation's electronic identity, held in a wallet app on the user's phone.
Source: eid.admin.ch, checked 2026-11-12
Trust service provider offering electronic signatures, seals and identification for Switzerland and the EU.
Source: trustservices.swisscom.com, checked 2026-11-12
Security and identity group; maker of Luna hardware security modules.
Attests or relies on: Luna HSMs used as the secure cryptographic device behind remote wallet key stores
Source: cpl.thalesgroup.com, checked 2026-11-12
Trust service provider for digital identity, signatures and certified email.
Source: infocert.it, checked 2026-11-12
Maker of the Remote Secure Element, a server-side key store for digital identity wallets.
Attests or relies on: Wallet keys held in HSMs instead of the phone
Source: ubiqu.com, checked 2026-11-12
Identity and wallet infrastructure provider; publishes guidance on eIDAS 2.
Source: walt.id, checked 2026-11-12
Related service: Attested wallets and digital identity
Why re-attestation matters here: An HSM can state that a key was generated inside it and has never left. That statement rests on firmware and configuration, which change with every update.
Amazon Web Services' managed hardware security module service.
Source: aws.amazon.com, checked 2026-11-12
Microsoft's single-tenant managed HSM service.
Attests or relies on: Key attestation to validate that keys are held in the managed HSM
Source: learn.microsoft.com, checked 2026-11-12
Eviden's network hardware security module.
Source: eviden.com, checked 2026-11-12
Enterprise data security and hardware security module provider.
Source: futurex.com, checked 2026-11-12
Hardware-backed keys in Google Cloud Key Management Service.
Attests or relies on: Attestation statements that let a customer verify a key is protected by an HSM
Source: cloud.google.com, checked 2026-11-12
An open hardware security module.
Source: nitrokey.com, checked 2026-11-12
Maker of Primus hardware security modules and a cloud HSM service.
Attests or relies on: Primus HSM attestation: signed statements about a key, the device and its users, verifiable up to the Securosys root certificate
Source: docs.securosys.com, checked 2026-11-12
Yubico's small hardware security module.
Attests or relies on: Attestation certificates for keys generated in the device
Source: developers.yubico.com, checked 2026-11-12
Related service: Attested autonomous vehicles and machines
Why re-attestation matters here: An autonomous truck or machine combines hardware and software from several companies and is updated over the air. Each update, repair or handover changes the state its operator relies on.
Vehicle software and autonomy supplier.
Source: appliedintuition.com, checked 2026-11-12
Developer of self-driving technology for trucks.
Source: aurora.tech, checked 2026-11-12
Caterpillar's autonomous haulage system for mining trucks.
Source: cat.com, checked 2026-11-12
Electric and autonomous freight company.
Source: einride.tech, checked 2026-11-12
Autonomous driving software for logistics.
Source: embotech.com, checked 2026-11-12
Mining equipment maker with autonomy products for drilling, blasting and haulage.
Source: epiroc.com, checked 2026-11-12
Ground autonomy for logistics vehicles.
Source: fernride.com, checked 2026-11-12
Autonomous systems for ground vehicles.
Source: forterra.com, checked 2026-11-12
Autonomous freight trucking company.
Source: gatik.ai, checked 2026-11-12
Autonomous earthmoving technology for excavators.
Source: gravisrobotics.com, checked 2026-11-12
Hitachi Construction Machinery's autonomous haulage system.
Source: hitachicm.com, checked 2026-11-12
John Deere's autonomous tractor programme.
Source: deere.com, checked 2026-11-12
Maker of cargo handling equipment for ports and terminals.
Source: kalmarglobal.com, checked 2026-11-12
Autonomous trucking and ground autonomy company.
Source: kodiak.ai, checked 2026-11-12
Komatsu's autonomous haulage system for mining trucks.
Source: komatsu.com, checked 2026-11-12
Autonomous yard operations for logistics yards.
Source: outrider.ai, checked 2026-11-12
Autonomous driving software company for trucks.
Source: plus.ai, checked 2026-11-12
Autonomous haulage systems for mines and quarries.
Source: pronto.ai, checked 2026-11-12
Sandvik's automation and teleoperation systems for mining equipment.
Source: rocktechnology.sandvik, checked 2026-11-12
Truck maker with autonomous transport solutions.
Source: scania.com, checked 2026-11-12
Volvo Group business for autonomous transport.
Source: volvoautonomoussolutions.com, checked 2026-11-12