Defakto Documentation

Defakto manages workload identity wherever you run software.

• Any environment: AWS, GCP, Azure, on-prem
• Any integration: Jenkins, Docker, GitHub, Buildkite, Istio, AI agents
• Any compute infrastructure: VM, bare-metal, Kubernetes, serverless

Quick Start

Explore Defakto with a guided step-by-step demo

Concepts

Understand trust domains, SPIFFE IDs, attestation, and how they fit together

Install

Requirements and installation guides for servers and agents

Configuration

Configure identity formats, credential policies, attestation methods, and telemetry

Integration

Connect Defakto with Kubernetes, Istio, CI/CD, and more

Operations

Monitoring, metrics, dashboards, and troubleshooting