Xenovira runs SLSA Level 3 provenance: every build is keyless-signed with cosign via Fulcio and logged to a public Rekor transparency log. Tamper-evident, auditable, and truly open source — security as proof, not a marketing checkbox.
Every build is cryptographically signed with keyless cosign via Fulcio and logged to a public Rekor transparency log. Verifiable, tamper-evident supply chain — not a checkbox, a proof.
Forgejo is MIT-licensed. Every line of code is auditable. No proprietary extensions, no hidden backdoors.
Forgejo is governed by its community of contributors, not a single corporation. Decisions are made in the open.
Your repos are served through Cloudflare's global network — DDoS protection, edge caching, and CDN acceleration built in.
Running Forgejo in our cloud is optional. The same code runs on your hardware if you ever want to leave.
Want the full feature set? See features → or view pricing →