AI Potluck
Back to Gap Map Organization

OSCAL Compass

unknown · United States

Scores

1 product on the map — 1 open.

Compliance Trestle

Openness

5 high confidence
5.0
license
Apache-2.0(OSI)
source
public
core features withheld
no

Trestle is published under Apache-2.0 by the OSCAL Compass community project, with no company selling a fuller edition of it.

Adoption

2 high confidence
2.0

PyPI downloads of compliance-trestle, the product's own package, measure its use.

Capability

3 high confidence
3.0

Its output is OSCAL, a published standard that auditors and their tools can validate independently, which puts it above tools that emit their own report formats. The content is still the operator's assertion, and signing is a beta feature, so it sits two steps below NVIDIA's hardware attestation.