Mission

Atomdrift's Mission is to make supply-chain security accessible to the open-source community, regardless of platform.

We are driven by these principles:

Local First

Our tools will never require a cloud provider or remote AI endpoint, though they may use one if you ask.

Zero Telemetry

Our tools never phone home. How you use them is your business, not ours.

Frugal

Analysis is expensive, so we do it once and remember the answer.
Human attention is even more expensive. Every false positive is a bug (opens in a new tab).

Portable

Software runs everywhere, so security tools should too.
We build and test on Linux, macOS, Windows, FreeBSD, and illumos; and provide best-effort support for all Tier 1 and Tier 2 Rust platforms (opens in a new tab).

Composable

Our tools produce output meant to be used by other tools. Integrations welcome (opens in a new tab).

Open

Our tools and rules are Apache 2.0 and will stay that way. Patches welcome (opens in a new tab).

Inspectable

Every finding shows its work; otherwise it's just security theater.

Questions or patches? GitHub or t, at this domain.