Trust that keeps up with how software gets built.

AI now writes a large and growing share of the world's software. That is useful, but speed does not prove security, reliability, or recovery. Teams need a technical trust signal that can keep up without pretending to be a compliance audit.

StackAttest validates software against controls mapped to OWASP ASVS 5, NIST SSDF, CWE, OWASP API Security Top 10, WSTG, SLSA. It gathers graded evidence from the live surface, repository, dependency graph, and isolated runtime, then turns the result into a Passport a founder controls.

We care about being honest more than being flattering. That is why we report four separate signals, preserve disagreements from a 6-model council, and mark a control without evidence as uncovered rather than passed. The verification ladder records how far the evidence has progressed from L0 through L5.

A trust product only works if its claims can be checked. That principle applies to every Passport and to StackAttest itself.