The verification contract

Attested means checked — within a stated scope.

It does not mean endorsed, secure or guaranteed. Each record shows exactly what ran and when.

Site reachable

The submitted public URL must resolve to a public network address and return HTTP 200.

Product evidence

The public page must contain enough real product information to distinguish it from a parked domain or empty launch shell.

Supplied links

If a GitHub repository is supplied, Attest checks that the public repository URL resolves. We do not inspect private code.

Basic identity sanity

The product name must appear on the public surface. Ambiguous ownership or identity is sent to manual review.

What the badge does not claim

Not an endorsement. Not a security audit.

No source-code audit
No penetration test
No financial, privacy or regulatory certification
No guarantee of future uptime or conduct

Affiliate disclosure

Some outbound links pay Attest a commission.

Where a tool marks its “Try” link as affiliate, Attest may earn a commission when you subscribe. Affiliate relationships never influence verification results, listing order or featured placement, and every listing keeps a direct, unmonetised link to the official site.

Machine record

Every published tool carries its checks.

{
  "site_live": { "passed": true, "status": 200 },
  "content_sanity": { "passed": true },
  "github": { "supplied": true, "passed": true },
  "scope": "Availability and public evidence only"
}

Submit a tool