Tech riderRev. 1 Oct 2026

Kosli

Ch 127.0of 23 Software Supply Chain Security Software

1Runs onAPI, Linux, Mac, self-hosted, Web, Windows
2CostsNot stated by the maker
3Source & repo securityYes
4Dependency analysisYes
5SBOM managementYes
6Build provenanceYes
7Artifact signingYes
8Provenance attestationsYes

7 lines stated Written from the maker's own pages: kosli.com

Visit site Alternatives

Overview

Kosli is ranked #12 of 23 in software supply chain security software on Specifiction. It runs on API, Linux, macOS, Self-hosted, Web, Windows.

Kosli plans and pricing

All plans

Custom annual contract Not published annual contract based on recorded data and retention · volume discounts · usage costs capped during contract kosli.com · 1 Oct 2026

Compared on software supply chain security software

Source & repo security: Yeskosli.com
Dependency analysis: Yeskosli.com
SBOM management: Yeskosli.com
Build provenance: Yeskosli.com
Artifact signing: Yeskosli.com
Provenance attestations: Yeskosli.com
Release policy gates: Yeskosli.com

Facts

Purpose: Kosli is a change recording and compliance monitoring platform for tracking and querying software or business-process changes.docs.kosli.com · 1 Oct 2026
Supply-chain security: Kosli centralizes attestations, SBOMs, scans and build metadata, then connects them to a real-time production view.kosli.com · 1 Oct 2026
Chain of custody: Kosli records cryptographic provenance and fingerprints to provide a tamper-evident chain of custody from commit to production.kosli.com · 1 Oct 2026
Policy controls: Kosli supports policy-as-code controls, automated evidence collection and real-time notifications for deviations.kosli.com · 1 Oct 2026
Runtime monitoring: Kosli detects running artifacts of unknown provenance and provides time-machine forensics for environment changes.kosli.com · 1 Oct 2026
Integrations: Kosli lists integrations including GitHub, Bitbucket, GitLab, CircleCI, Jenkins, Microsoft Azure, TeamCity, Terraform, Ansible, Datadog, New Relic, Jira, ServiceNow, Slack and Email.kosli.com · 1 Oct 2026
Tool compatibility: Kosli says it is tool-agnostic and push-only, so CI systems, scanners and signing tools can remain in place.kosli.com · 1 Oct 2026
Security certification: Kosli states that it completed an AICPA SOC 2 Type II audit.kosli.com · 1 Oct 2026
Data protection: Kosli states that data is encrypted at rest and in transit, backed up daily to another region, and that application data is resident in the EU.kosli.com · 1 Oct 2026
Identity controls: Kosli supports SSO through an existing identity provider and automatically uses the provider’s MFA settings.kosli.com · 1 Oct 2026
Deployment options: Kosli offers multi-tenant SaaS, single-tenant hosting in a customer-selected AWS region, and on-premises deployment for Enterprise customers.kosli.com · 1 Oct 2026
Access model: Kosli says it does not require access to customer systems because data is sent one way through its API or open-source CLI.kosli.com · 1 Oct 2026
Support SLA: Kosli states that security SLAs are provided for Enterprise customers.kosli.com · 1 Oct 2026
Target users: Kosli says it is built for software development teams operating in highly regulated industries, including banks and other regulated enterprises.kosli.com · 1 Oct 2026