What Kosli is
Kosli has created a way to attest to actions taken in cloud environments, most clearly CI/CD artifacts. Their core technology allows them to detect any change to any file, so there are a lot of potential use cases for this technology. The vendor site is www.kosli.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Kosli covers
Kosli is in the catalog for these capabilities. Catalog tags: Best for Enterprise.
How to evaluate Kosli in a security program
Use Kosli as a stack candidate, not as diligence evidence. The oneNorma score for Kosli is 3.8/10 (percentile 9). A dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.kosli.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
