Drop our GitHub App on any repo. Every pull request gets a real ML-DSA-65 + Ed25519 dual-signed receipt of its diff. We anchor it to Base 8453 and post it as a PR comment with one-click verify. Public repos are always free.
One click. Pick the repos you want covered. Public repos are free, forever.
Our bot grabs the diff, signs it, and posts the receipt ID and verify link right on the PR as a comment.
The receipt travels with the PR. Check it at /verify/?id=... on any device. If someone tampers with it, you'll know. It's signed with ML-DSA-65 and Ed25519.
| Tier | Repos | Receipts/mo | Price |
|---|---|---|---|
| Public OSS | Unlimited public repos | Unlimited | Free |
| Team | Up to 25 private repos | 5,000 | $19/mo |
| Enterprise | Unlimited private repos + SSO + on-prem signer key | Unmetered | $499/mo |
Every receipt carries a real ML-DSA-65 (Dilithium) and Ed25519 dual signature, anchored to a federated block hash. No mocks. No simulation.
No install required. Paste any unified diff and we'll sign it with the same crypto rail the GitHub App uses.