Codenotary Trustcenter
Codenotary Trustcenter provides AI-driven trust enforcement for applications and their components.
What Codenotary Trustcenter is
Codenotary Trustcenter provides AI-driven trust enforcement for applications and their components. It can import and export SBOMs in any format, generate detailed SBOMs for open-source applications or containers, and analyze them. The platform tracks component provenance and trust levels, alerts teams to unknown or untrusted components, and monitors attestations and application and stack risk profiles. It provides real-time application risk scores with reachability analysis and can enforce deployment of container images built from known, trusted components. Trustcenter supports software risk profiles for compliance, audit, and regulatory adherence, as well as artifact attestation guidelines such as in-toto. Listed integrations include CI/CD and SCM tools, Docker and OCI registries, Snyk, Aqua, JFrog, Jenkins, GitLab, GitHub, Kubernetes, and AWS Lambda. Language bindings include Java, C++, Python, Node.js, Go, Rust, and PHP. Trustcenter/Teams is available on-premises or in the cloud, with component discovery, dependency tracking, centralized SBOM storage, and continuous vulnerability scanning. Enterprise plans start at $3,600 per month; Teams pricing is by quote, and a 30-day trial is offered for Teams.
Good
- Imports and exports SBOMs in any format.
- Tracks component provenance and trust levels.
- Provides real-time risk scores with reachability analysis.
- Supports on-premises or cloud Teams deployment.
- Lists integrations across CI/CD, registries, and platforms.
Watch out
- Enterprise plans start at $3,600 per month.
- Teams pricing requires a quote.
- No free plan is listed.
Who it suits
Trustcenter suits teams that need to track software components, SBOMs, and application risk. Its Teams offering is available on-premises or in the cloud, while Enterprise plans start at $3,600 per month.
Verdict
Trustcenter combines SBOM management, component trust tracking, risk monitoring, and deployment enforcement. Its entry price is substantial, and Teams pricing requires contacting Codenotary.
Plans and prices
From Codenotary Trustcenter's own pricing page, checked 29 Sep 2001.
| Plan | Price | What it gives you |
|---|---|---|
| Trustcenter/Enterprise | $3,600 a month | Plans start at $3600/month; manages software projects and SBOMs; integrates into any CI/CD platform |
| Trustcenter/Teams | Priced on request | On-premises or cloud; 30-day trial offered · Contact for a quote |
The facts
Each one read from Codenotary Trustcenter's own pages, with the date it was checked.
The company
- Company founding
- LinkedIn lists Codenotary as founded in 2018.checked 29 Sep 2001
- Company headquarters
- Codenotary lists its address as 6300 W Loop S Suite 240, Bellaire, Texas 77401, United States.checked 29 Sep 2001
- Headquarters
- Bellaire, Texas, United Stateschecked 28 Sep 2001
- Team deployment
- Trustcenter/Teams is offered on-premises or in the cloud and provides component discovery, dependency tracking, centralized SBOM storage, and continuous vulnerability scanning.checked 29 Sep 2001
- Trustcenter/Teams pricing
- The Trustcenter/Teams page says to contact Codenotary for a quote.checked 29 Sep 2001
What it does
- Compliance
- Trustcenter supports software risk profiles for compliance, audit, and regulatory adherence, and supports artifact attestation guidelines such as in-toto.checked 29 Sep 2001
- Component trust
- Trustcenter tracks component provenance and trust levels and alerts when unknown or untrusted components are detected.checked 29 Sep 2001
- Enforcement
- It can enforce deployment of container images built with known and trusted components.checked 29 Sep 2001
- Enterprise pricing detail
- The Trustcenter/Enterprise pricing page states that plans start at $3600/month.checked 29 Sep 2001
- Integrations
- The maker lists CI/CD and SCM tools, Docker and OCI registries, Snyk, Aqua, JFrog, Jenkins, GitLab, GitHub, Kubernetes, and AWS Lambda integrations.checked 29 Sep 2001
- Languages
- The maker lists bindings for Java, C++, Python, Node.js, Go, Rust, and PHP.checked 29 Sep 2001
- Purpose
- Trustcenter provides AI-driven trust enforcement for applications and their components.checked 29 Sep 2001
- Risk monitoring
- It continuously tracks attestations and application and stack risk profiles, and provides real-time application risk scores with reachability analysis.checked 29 Sep 2001
- SBOM management
- It can import and export SBOMs in any format, generate detailed SBOMs for open-source applications or containers, and analyze them.checked 29 Sep 2001
Money
- Trial
- Trustcenter/Teams offers a 30-day trial.checked 29 Sep 2001
Alternatives to Codenotary Trustcenter
- 1
Sonatype Nexus Repository
Free planWebAPILinuxmacOS7.7From $162.50 a month - 2
Ortelius
Free planWebAPISelf-hosted7.1From $40 a month - 3
sbomify
Free planWebAPILinuxmacOS7.0From $159 a month - 4
FOSSA
Free planWebAPILinuxSelf-hosted6.9From $168,392.50 a month - 5
ReARM
Free planWebAPISelf-hosted6.9From $75 a month - 6
Exodos Labs
Free planWebAPISelf-hosted6.7From $29 a month