Application Security

Code, dependency, secret, infrastructure and logic-flaw findings · plain-English requirements · AI agents that fix · developer training

Components in SBOMs

8,412

CycloneDX for every build

Builds signed

100%

Sigstore, SLSA level 3

Known-vulnerable, reachable

fix PRs open

Licence risk

AGPL in a service, under review

Releases

Release	Service	SBOM	Signature	Provenance	Vulnerable deps	Status
afcos-core 4.12.0	AFC OS	Yes	Verified	SLSA 3	0	Published
client-portal 2.8.3	Client Portal	Yes	Verified	SLSA 3	1	Review
wb-portal 1.9.0	Whistleblower Portal	Yes	Verified	SLSA 3	0	Published

Lifecycle

Security programme · step 1 of 7