Blog
Guide
Becoming a CSAF trusted provider in 5 steps
Verify your domain, create keys, publish your first advisory: how to become a trusted provider – in one afternoon.
Daniel Kaya
20 August 2026· 5 min read
A CSAF trusted provider has to meet a number of technical requirements. With Secvisory it takes five steps.
1. Register your company
Create your company and invite your team with roles.
2. Verify your domain
Prove ownership of your domain with a DNS TXT record or a file.
3. Create an OpenPGP key
Secvisory creates your signing key in the isolated signer – or you use your Vault.
4. Write your first advisory
In the editor with live validation or by upload. Then: review with the four-eyes principle.
5. Publish
provider-metadata.json, ROLIE feed, hashes and signatures are created automatically. Done.
