Your scanners detect.
Provenance decides.
Provenance sits above every scanner you already run, correlates their findings against business criticality, and gives the CISO and the board one defensible, continuous picture of what actually matters — with every decision on record.
A smoke detector tells you about one room. Nobody watches the building.
Every enterprise runs 4–8 scanners, each with its own screaming queue. 50,000 open findings — and no defensible way to say which 50 actually matter.
AI is writing your code. Who signed off?
Found in the first continuous watch of a real 52-repo engineering org. Adopted fast, governed late — the pattern Provenance exists to catch.
Connect → Contextualize → Decide → Prove
Pull signal from where code lives.
One-class onboarding for GitHub and Azure DevOps today; independent scanners next.
Provenance consumes findings — it never generates them.
Map every repo to what it's worth.
Business criticality, asset classes, regulatory weight, blind spots.
Distance from the core is criticality — the radar shows which rooms are load-bearing.
Prioritize, assign, and put the decision on record.
Recommendations in order — fix, waive, or accept, each with owner, rationale, SLA, and an evidence snapshot.
The decision loop closes where work happens.
Provenanceby diwoI observed 179 pull requests merged this period. Evidence shows 26 (15%) were AI-authored — 25 merged without a recorded human review.
Unreviewed by tool: claude (23), copilot (1), devin (1). Pace rising — 10 in the last month.
The number your board can stand behind.
The Provenance Score, the Risk Office memo, the board-ready PDF.
Continuous evidence for auditors and insurers, mapped to EU AI Act and NIST AI RMF.
Priced as governance, not as a scanner.
Start free. See your own estate before you spend a dollar.
Ask ProvenanceAsk your estate anything
Plain-language answers over a read-only view of your estate — grounded in the same evidence that goes to your board. The same Catalyst pipeline, second product, one engine.
ASK PROVENANCEcontinuous watchScanners find. Provenance decides.
Scanners are the oracles. Provenance is the coach — accumulated, contextual judgment with the decision loop closed.
“Provenance is a forensics product wearing a governance suit.”
Chain of custody for AI-written code — who wrote it, who reviewed it, what the evidence shows, frozen so it can't be rewritten.
Your auditor, your insurer, and the SEC already require this
Continuous, defensible posture is no longer a preference — it’s the condition for staying insured, certified, and audit-ready.
One engine. The conversation your board is having.
See your AI-code posture this afternoon.
Connect your first source in minutes — read-only, no credit card, no sales call. Your Provenance Score, your blind spots, and your first briefing, from your own estate.
Provenance — the governance layer for AI-written code.
Evidence readiness, not a legal determination. Provenance reads code signals — never your data.