SLSA
What is SLSA?
Supply-chain Levels for Software Artifacts. It comprises 44 controls organised across 9 domains, and applies in International.
How SLSA maps to other frameworks
All 44 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 9 domains SLSA groups its controls into
Frameworks that share controls with SLSA
Each of these has at least one control mapped to a control in SLSA. The number is how many SLSA controls are shared, counted from the mapping graph.
PCI P2PE
3 shared controlsUS EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements
3 shared controlsTSA Pipeline Cybersecurity Directives
3 shared controlsISO 27017
3 shared controlsNIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
3 shared controlsFFIEC IT Examination Handbook
3 shared controlsISO 27018
3 shared controlsASD Strategies to Mitigate Cyber Security Incidents
3 shared controlsTraining on frameworks that overlap SLSA
There is no course on SLSA itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.
Where SLSA overlaps with the standards you already hold
What an auditor will ask you for
All 24 SLSA controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the SLSA evidence request listWhat SLSA means in your sector
What SLSA means for your job
Questions people ask about SLSA
What is SLSA?
Where does SLSA apply?
What frameworks does SLSA map to?
How do I get started with SLSA compliance?
Query SLSA programmatically
SLSA, its 44 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
SLSA API reference and MCP config →What SLSA requires, control by control
Each page carries the requirement text for one SLSA control and what an assessor expects to see as evidence.
How ready are you for SLSA?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.