Tacit

About Tacit

Product security teams at software vendors are accountable for the security of products they don't build themselves — across every team, every version, from first commit to end of support. But accountability without continuous visibility over the development process and software supply chain is just exposure. Most teams have no structured way to collect security evidence across the product lifecycle, no shared context to make the right calls, and no system to communicate their posture to customers, partners, or regulators. Tacit is the product security control platform for software vendors. We give security teams the evidence layer they need — from design to deployment — to triage with context, coordinate across teams, and prove their security posture to anyone who asks. Founded in Paris, we are building the proof layer between software products and the people who trust them.