Faster changes. Stronger security. Painless audits.
Kosli records all of the changes in your software to give you the easy buttons for audit, compliance, security, and incident response.
From startups and scaleups to large enterprises, software teams trust Kosli to record the facts
Audit & Compliance
Ace your next audit without slowing your software releases with tickets and meetings. Deploy freely with continuous compliance.
Security & Defense
Remove risk and uncertainty. Know exactly whatâs running in production and where it was deployed from.
SRE & Platform Engineering
Pinpoint changes without digging in noisy dashboards to find them. Get the answer you need with powerful commands.
Integrates with your tools, your workflows, your industry
Kosli integrates with the tools you already use and doesnât force you into adopting any new workflows. It gives teams in regulated sectors like finance and healthcare the power to deliver software with security, compliance, and speed.
Tracking change across modern reference architecture is complicated
Kosli records the facts to make governance jobs easy
How does Kosli ârecordâ everything? What kind of permissions does that require?
Kosli doesnât access or record your sensitive data or secrets. Our customers record everything they need for audit, security and compliance by sending the cryptographic fingerprints for running artifacts alongside the metadata for builds, tests, pull requests, etc. So you donât have to worry about the data weâre collecting because we only receive what you decide to send us. Weâre also SOC 2 Type 2 compliant, so you can be sure we take security and availability seriously.
Automated recording and reporting for all of the changes in your software
Deploy without manual change approvals and pass audits with a couple of clicks
This image shows the live compliance status of a production environment in AWS. The green lozenge means that every artifact running in that environment has had all the necessary tests, scans, code reviews, PRs, etc - and that this evidence has been recorded in Kosli.
And you can easily download this evidence to CSV for your auditor. For example, to get all of the control evidence for every deployment, just choose a date range and download a complete audit trail with a couple clicks.
Alerts for non-compliant or unauthorized changes
Kosli takes a snapshot of your runtimes whenever a change is made, and here you can see that in snapshot 916 a non-complaint or unauthorized change has been deployed.In this example, Kosli has detected that the most recent change to the environment does not have Snyk scan evidence, and it has provided an alert via the Slack integration. Snapshot 921 shows the issue has been remediated.
Pinpoint the cause of incidents without digging and delays
Because Kosli stores a snapshot of your environments every time a change happens, itâs easy to quickly pinpoint the changes that cause incidents using simple diff commands.In this example prod is down but beta is up. By diffing the two environments using Kosliâs CLI you can immediately find the change thatâs running in prod, but not in beta.
Elite performing teams deliver changes 973x more frequently. Youâve invested in DevOps - now unlock the benefits with Continuous Compliance.
âWe always know our compliance status in real time and that gives us a lot of freedom to deliver our changesâ
Cato Auestad, Chief Technology Officer @Firi
View Firiâs customer story
âWe didnât spend any extra time gathering evidence manually because all of it had already been recorded in Kosliâ
Ăyvind Fanebust, Partner @Stacc
View Stacc's customer story
âWe now have a central system of record where the auditor can see a complete audit trail of changes across multiple systemsâ
Alex Kantor, Director of Technology @Modulr
View Modulr's customer story
âWe believe that DevOps is the key to our success, and in our industry being able to automate change management is an important part of our technical strategyâ
Andreas Røe, Chief Technology Officer @ZTL
View ZTL's customer story
"Kosli doesnât just help us to respond to incidents, it helps us to reduce their frequency"
Mark Martin, Sr. Director Platform Engineering @SolarWinds
View SolarWind's customer story
Developer feedback with Kosli CLI
Real-time observability for devs and engineers
Tired of trying to figure out which change broke everything? Need to know where your commit is? Get the ability to see how your environments and pipelines are actually changing and quickly locate the change you need. See our developer feedback page to get a taste of what you can do from the command line with Kosli.
Learn more about developer feedback
$ kosli search baa49d2
Search result resolved to commit baa49d252b61a9ba8e765a41161de50c51d0529a
Name: cyberdojo/creator:baa49d2
Fingerprint: 29d4c97df320966f22c0d23f1ffa8a864572eb078044f5561d11873b1de40e65
Has provenance: true
Flow: creator
Git commit: baa49d252b61a9ba8e765a41161de50c51d0529a
Commit URL: https://github.com/cyber-dojo/creator/commit/baa49d252b61a9ba8e765a41161de50c51d0529a
Build URL: https://github.com/cyber-dojo/creator/actions/runs/4871346095
Compliance state: COMPLIANT
Running in: [ aws-beta, aws-prod ]
Exited from: [ ]
History:
Commit baa49d2 Wed, 03 May 2023 13:27:00 CEST
Artifact created Wed, 03 May 2023 13:29:56 CEST
Received unit-test evidence Wed, 03 May 2023 13:31:07 CEST
Received branch-coverage evidence Wed, 03 May 2023 13:31:10 CEST
Received snyk-scan evidence Wed, 03 May 2023 13:31:36 CEST
Expect deployment #222 to aws-prod environment Wed, 03 May 2023 13:32:44 CEST
Expect deployment #223 to aws-beta environment Wed, 03 May 2023 13:32:48 CEST
Started running in aws-prod#686 environment Wed, 03 May 2023 13:35:02 CEST
Started running in aws-beta#590 environment Wed, 03 May 2023 13:35:17 CEST
Connect the dots between dev and ops
-
Rich support for your runtime environments
Kubernetes cluster, Amazon ECS, Amazon S3, Amazon Lambda, Physical/Virtual server -
Easy to implement in your CI/CD toolstack
No need to change your existing CI structure. To use Kosli you just need to run commands in your pipelines and runtime environments. -
Familiar CLI commands
Log, diff, ls, assert - Kosli uses easy and intuitive commands that let you explore your pipelines and runtime environments.
-
Rich support for your runtime environments
Kubernetes cluster, Amazon ECS, Amazon S3, Amazon Lambda, Physical/Virtual server -
Easy to implement in your CI/CD toolstack
No need to change your existing CI structure. To use Kosli you just need to run commands in your pipelines and runtime environments. -
Familiar CLI commands
Log, diff, ls, assert - Kosli uses easy and intuitive commands that let you explore your pipelines and runtime environments.
How it works
- Record
- Connect
- Search
Start reporting your environments and pipelines. Get started with one line of code in your runtime.
Record your environments
Know *exactly* whatâs running in your environments. With one line of code Kosli fingerprints the running components in your environment and makes new commits in the database whenever a change is detected. Replace your config repos and glue scripts without enforcing a deployment approach
Connect your pipelines
Now you know whatâs running in ops, connect it to your pipeline events. Get a live map of builds, tests, approvals, and deployments and see how it matches up with whatâs actually running in your environments. Follow commits all the way to production and trace deployments back to the commit.
Search your DevOps history
With dev and ops aligned you can take time-consuming guesswork and frustration out of incident response, security, and even evidence gathering for audit. Use Kosliâs powerful search tools to log, diff and browse every change from commit to prod. Get what you need from the browser, API, or command line.
Resources
Kosliâs free asset helps define your SSLDC, providing a defined, repeatable way of working that manages IT risks
Fork the repo
Download Kosliâs Free white paper: Supply Chain Levels for Software Artifacts (SLSA)
View white paper
See how Kosli enabled Staccâs journey to ISO compliance at NDC Conference and that turbo eureka moment!
Watch the video
How to prove your SDLC is being followed for compliance with medical standards like IEC 62304
Read the blog
What does it mean to deliver software with Continuous Compliance?
Read the blog
Meet the companies that made friends with change with Kosli and ship with confidence and speed
View customer stories