Drop our GitHub App on any repo. Every pull request gets a real ML-DSA-65 + Ed25519 dual-signed receipt of its diff, anchored to Base 8453, posted as a PR comment with one-click verify. Public repos always free.
One click. Pick the repos you want covered. Public repos free, forever.
Bot fetches the diff, issues a dual-signed receipt, posts the receipt ID and verify link as a PR comment.
Receipt is portable. Verify via /verify/?id=… on any device. Tamper-evident. ML-DSA-65 + Ed25519.
| Tier | Repos | Receipts/mo | Price |
|---|---|---|---|
| Public OSS | Unlimited public repos | Unlimited | Free |
| Team | Up to 25 private repos | 5,000 | $19/mo |
| Enterprise | Unlimited private repos + SSO + on-prem signer key | Unmetered | $499/mo |
Every receipt is a real ML-DSA-65 (Dilithium) + Ed25519 dual signature. Anchored to a federated block hash. No mocks. No simulation.
No install required. Paste any unified diff and we'll sign it with the same crypto rail the GitHub App uses.