SignPath – Zero Trust Software Integrity for Modern Development Teams

SignPath is a European provider of software supply chain security based in Vienna. Its platform, DevSec360, establishes a Zero Trust approach to software development that goes beyond traditional code signing. By fully verifying all security-relevant build information, the signing process becomes a technically enforced release gate – enabling consistent policy enforcement directly within the CI/CD pipeline. 

DevSec360 combines centralized, artifact-based signing with automated verification of source code origin, review status, build context, and policy compliance. Only verified, authorized, and fully traceable releases are signed. The integration is CI/CD-native and does not disrupt development proce ...