| What it does | Evidence collection for security fixes in your GitHub repo
| Programmable CI orchestration for AI
|
|---|
| Stage | Not given
| Established
|
|---|
| Founded | Not given
| 2013
|
|---|
| Based in | DE
| Not given
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free GitHub Action (MIT license). fixdossier Pro: €69 one-time founding licence (tax included via Dodo Payments, no recurring annual fee) for first 50 GitHub Organizations, includes 1 GitHub organization, up to 3 repositories/products, up to 5 reviewers, up to 24 Final Evidence Packs per year, 60 Dr
| Free Plan: $0 with up to 5 users, 10 concurrent jobs, 2,000 Linux vCPU minutes per month. Pro Plan: $30 per active user/month with up to 50 users, 250 concurrent agents, 4,000 Linux AMD64 vCPU minutes per month, 1M test executions per month. Enterprise Plan: Custom pricing with custom usage limits,
|
|---|
| Key features | - Collects security-fix evidence from releases, tags, GitHub security advisories, Dependabot/Renovate PRs, and commits
- Generates dated fix record with transparent mapping methods
- Creates machine-readable JSON output (fixdossier/v1 schema)
- Generates support policy with security support dates per release
- Pro: OIDC CI ingestion with zero long-lived repository secrets
- Pro: Human sign-off with append-only review ledger and reviewer attribution
- Pro: Export Ed25519-signed Evidence Packs as PDF and ZIP
- Runs on every release and weekly with default GITHUB_TOKEN
- Notes permission gaps instead of failing the run
| - Dynamic pipelines that adapt to build events and code changes in real time
- Intelligent test splitting and flaky test detection
- Multiple compute types: self-hosted, Mac, Linux, and Windows agents
- Package registry management for supply chain security
- AI and LLM integrations for agentic workflows
- Unlimited parallelism for fast feedback cycles
- Comprehensive test analytics across unit, integration, and end-to-end tests
- Bazel orchestration with dynamic pipeline support
- Support for multiple testing frameworks and languages
- REST and GraphQL APIs for integration
|
|---|
| What makes it different | - MIT-licensed free tool with transparent mapping methods showing how each fix was identified
- Generates support periods and compliance-ready evidence for EU Product Liability and Cyber Resilience regulations
- Pro: Ed25519-signed, verifiable Evidence Packs with full audit trails for customer questionnaires and archives
- Reads advisory patched_versions ranges for precise version mapping without keyword guessing
| - Fastest CI for AI workflows at scale
- Programmable pipelines in your language of choice rather than static YAML
- Complete control with self-hosted agents on your infrastructure
- Reduced build times through massive parallelization
- Enterprise-grade security with SOC 2 Type II compliance
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | 76 ● no change since last check |
|---|
| Trust Flow (Majestic) | 0 | 25 |
|---|
| Citation Flow (Majestic) | 12 | 36 |
|---|
| Referring domains (Majestic) | 2 | 2435 |
|---|
Buildkite