Drop our GitHub App on any repo. Every pull request gets an ML-DSA-65 + Ed25519 dual-signed receipt of its diff, signed off-chain and verifiable offline, posted as a PR comment with one-click verification. Any chain anchor must be separately selected and specified. Public repos are always free.
One click. Pick the repos you want covered. Public repos are free.
Our bot grabs the diff, signs it, and posts the receipt ID and verify link right on the PR as a comment.
The receipt travels with the PR. Check it at /verify/?id=... on any device. If someone tampers with it, you'll know. It's signed with ML-DSA-65 and Ed25519.
| Tier | Repos | Receipts/mo | Price |
|---|---|---|---|
| Public OSS | Unlimited public repos | Unlimited | Free |
| Team | Up to 25 private repos | 5,000 | $19/mo |
| Enterprise | Unlimited private repos + SSO + on-prem signer key | Unmetered | $499/mo |
Every receipt carries a real ML-DSA-65 (Dilithium) and Ed25519 dual signature, anchored to a federated block hash. No mocks. No simulation.
No install required. Paste any unified diff and we'll sign it with the same crypto rail the GitHub App uses.