SLSA
What is SLSA?
Supply-chain Levels for Software Artifacts. It comprises 4 controls organised across 4 domains, and applies in International.
How SLSA maps to other frameworks
All 4 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 4 domains SLSA groups its controls into
Where SLSA overlaps with the standards you already hold
What SLSA means in your sector
What SLSA means for your job
Questions people ask about SLSA
What is SLSA?
How many controls does SLSA have?
Where does SLSA apply?
What frameworks does SLSA map to?
How do I get started with SLSA compliance?
Query SLSA programmatically
SLSA, its 4 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
SLSA API reference and MCP config →What SLSA requires, control by control
Each page carries the requirement text for one SLSA control and what an assessor expects to see as evidence.
How ready are you for SLSA?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.