Security findings that hold up in court.

VOKTARN analyses what your organization ships — and turns every result into a signed, reproducible piece of evidence. Byte-identical on every run.

▸ hosted in Germany · GDPR · double opt-in

Almost there.

Confirmation link sent to . Click it to join the waitlist.

Confirmed — thank you. You will receive a message as soon as early access is enabled for your organization.

Most scanners can’t reproduce yesterday’s result. We can — today, in an audit, and in five years.

WHY VOKTARN

◇

Deterministic

Same input, same finding. Byte for byte. Years later too.

⛨

Evidence, not screenshots

Every finding signed, every chain complete. An artifact that lasts.

⬡

Governance first

The platform is an evidence and governance tool. It grows stronger with every module.

COMPONENT VISIBILITY

Every dependency. Every layer. Evidenced.

Dependencies, binaries, engines — cross-referenced against OSV, NVD, KEV and EPSS. Not estimated. Evidenced.

SECURITY

🔒

Your data stays your data

No sharing, no routing through third parties, no silent export.

◐

Evidence instead of trust

Every step is logged, every finding is traceable. You can check.

🔑

Immutable log

Append-only. Findings can be deleted — the record of their existence cannot.

▤

Security first

Before convenience, before speed, before marketing.

BUILT FOR THE 2026 REGULATORY WAVE

NIS2Evidence for essential & important entities.

DORAICT risk evidence for BaFin examinations.

CRASBOMs & vulnerability records as verifiable evidence.

BSI TR-03183-2CycloneDX · SPDX, format-conformant.

Others give you a dashboard. We give you evidence that holds up in court.

STANDARDS

Deterministic findings CycloneDX · SPDX STIX 2.1 · SARIF OSV · NVD · KEV · EPSS CVSS Ed25519 signing Immutable audit trail Attack-tree analysis

FOR

Banks, insurers, government agencies, critical infrastructure. Processed in Germany — never passed on.