๐Ÿ›ก๏ธ Independent Trust Authority

Trust, but verify.

Every AI tool scanned, scored, and certified. Know what your AI tools are doing before you connect.

No account required ยท Results are public ยท Max 5 scans/hour

Trust Score Distribution

Recently Scanned

View all โ†’

Highest Rated

View all โ†’

Newly Certified

View all โ†’

Recently Flagged

View all โ†’

Recently Indexed Packages

View all โ†’

Touchstone Security Research

View Advisories โ†’

Vulnerability Research

63 automated checks across 9 domains including A2A Agent Card security, tool poisoning, input validation, data security, supply chain, infrastructure, and runtime. Findings scored with OWASP AIVSS.

Supply Chain & SBOM

CycloneDX SBOM generation, dependency vulnerability scanning via OSV, Sigstore provenance verification, and container hardening analysis for every indexed package.

10 Compliance Frameworks

Every finding mapped to CoSAI, OWASP MCP Top 10, OWASP Agentic AI Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act, ISO 42001, MAESTRO, SOC 2 Type II, and HITRUST CSF. Published advisories include full compliance context.

Red Team Testing

219 automated adversarial attack templates across 14 categories. Prompt injection, tool poisoning, privilege escalation, jailbreak, encoding bypass, and more. Available via API and CLI.

Published Advisories Check Reference (63) Red Team Dashboard

Get Your Server Certified

Stand out in MCP marketplaces with a verified trust badge. Prove to users your server is safe, transparent, and trustworthy.

Start Certification Learn More