Kosli

What Kosli is

Kosli is a change-recording and compliance-monitoring platform for tracking and querying changes to software or business processes. It gathers attestations, software bills of materials, scans and build metadata, then links them to a current production view. Cryptographic provenance and fingerprints create a tamper-evident record from commit to production, while policy-as-code controls, automated evidence collection and notifications help surface deviations. Kosli can identify running artifacts with unknown provenance and offers time-machine forensics for environment changes. It supports source and repository security, dependency analysis, SBOM management, build provenance, artifact signing, provenance attestations and release policy gates. Listed integrations include GitHub, GitLab, Jenkins, Azure, Terraform, Datadog, Jira and Slack, among others. Deployment options include multi-tenant SaaS, single-tenant hosting in a customer-selected AWS region and on-premises deployment for Enterprise customers. Kosli is headquartered in Oslo; pricing is available on request, with a listed custom annual contract based on recorded data and retention.