TestifySec

TestifySec builds JUDGE, a software supply chain attestation and compliance platform that turns CI/CD pipeline activity into cryptographically signed, audit-ready evidence mapped to frameworks such as NIST 800-53, SOC 2, and FedRAMP. The company maintains the open-source in-toto projects Witness and Archivista, and its team members co-authored NIST SP 800-204D and contributed to the CNCF software supply chain security work. Founded by CEO Cole Kennedy and based in Huntsville, Alabama, TestifySec sells to regulated enterprise and federal software producers.