Build On the Trust Layer

Secure REST APIs across the TrustInX operational surface. Connect users, identities, assets, risks, controls, evidence, security events, incidents, vendors and compliance information, and read trust scores, risk, compliance status, security posture, incidents, recommendations, reports and workflow status.

• Token lifecycle controls and role-aware access for every integration.
• Domain-scoped resources: identity, risk, compliance, evidence, trust, cyber defense and workflow.
• Every API call bound to a validated tenant — no cross-tenant context.
• Full endpoint reference publishes as documentation ships.

First-class client libraries planned for TypeScript, Python, Go and Rust so builders can integrate TrustInX semantics without hand-rolling auth and tenant binding.

• TypeScript / React hooks for frontend and Next.js integrations.
• Python client for automation, ML and security tooling.
• Go and Rust clients for infrastructure and platform operators.
• Downloads, auth helpers and typed models follow when published.

A lightweight, tenant-scoped CLI for platform operators to drive governance, evidence, policy and workflow operations from scripts and CI/CD.

• Authenticate once; every command resolves the same tenant boundary.
• Inspect risk, compliance and evidence state programmatically.
• Trigger and verify governed workflows from pipelines.
• Binary distribution and command reference follow.

TrustInX is integration-native — you keep your existing systems of record and connect through the secure connector layer (see Product Spec, Customer Connection Model).

• Identity: SAML 2.0, OpenID Connect and OAuth 2.0; Entra ID, Okta, Google Workspace, Active Directory and LDAP.
• Security: SIEM, EDR, XDR, firewalls, IDS/IPS, vulnerability scanners, cloud security and endpoint security.
• Cloud: AWS, Microsoft Azure, Google Cloud and Kubernetes.
• Business: ERP, CRM, HR, finance, procurement, vendor-management, ITSM, ticketing and document repositories.

Event-driven notification and telemetry delivery so downstream systems react to change in near real time.

• Change events for risk, compliance, evidence, incidents and workflow state.
• OpenTelemetry and event-stream delivery for telemetry.
• Signed payloads and retry semantics.
• Webhook endpoints, schemas and examples follow.

Guides, quickstarts and reference material covering connection, identity, security and governed automation.

• Quickstart: connect identity in minutes, then governance, security, telemetry and business systems.
• Progressive adoption stages: identity → governance/risk/compliance/evidence → security → telemetry → business → advanced AI.
• Security-by-design guidance: zero trust, least privilege, tenant isolation, immutable audit.
• Docs surface goes live as the reference completes.

A dated, versioned record of changes to the platform and developer surface. No entries are published until there is real release history to report.

• Semantic versioning across API, SDKs, CLI and integrations.
• Deprecation and migration notes for breaking changes.
• Every entry tied to an immutable release.
• Release history follows actual shipping.

Live operational status for the TrustInX platform. This page reports only real signals from the running environment — nothing is simulated.

• Platform, API gateway, service and integration health.
• Incident history and maintenance windows.
• Region and tenant-level signal where applicable.
• Status surface goes live with the running stack.