Observed arrival · 2026-09-24
ProvenClosed: security fixes with a receipt
ProvenClosed describes an attack-surface monitoring tool that rechecks reported exposures and produces signed remediation attestations for independent verification.
- For
- Security teams preparing for audits and customer reviews
- Worth noticing
- The displayed certificate uses DSSE/RS256; the page says its sample data is made up, while the certificate layout and verifier output are real.
Field notes
Ownership starts with a DNS TXT record; before that, the page says monitoring is limited to a passive baseline from public records. It describes scheduled scans across subdomains, ports, TLS, headers, vulnerabilities, and AWS posture, with findings cleared only after a later scan and monitored for regression. The sample attestation reports DSSE/RS256 verification and complete coverage, but its underlying data is explicitly made up.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue