Getting started

This page takes a new team from nothing to its first authorization. It takes a few minutes to sign up; the rest happens with our engineers alongside you.

1. Create your organization

Go to attest.ulapcybo.app/signup and enter three things:

Field	What to put
Your name	The person setting Attest up for the team. You become its first administrator.
Work email	An address you can open now. The confirmation link goes there.
Organization	The name your team or program goes by. It is how Attest names your organization; you can ask us to change it later.

Attest emails you a confirmation link. If nothing arrives within a few minutes, check spam, then sign up again. The page says the same thing whether or not an address is new, so it never reveals who has an account.

2. Confirm your email

Open the link in the email. It works for 24 hours and only once. The page asks you to press Confirm and create organization; your organization is created at that moment, not before. Email security tools that open links on your behalf cannot use it up, because nothing happens until a person presses the button.

If the page says the link expired or was not recognized, sign up again for a new one. If it says the link was already used, your organization exists; go to the next step from the email we sent after payment, or write to us.

3. Start the subscription

After you confirm, Attest takes you to Stripe's checkout for the Connected plan. Early access teams pay the early access rate for as long as they stay with us. Card details go to Stripe only; Attest never sees them.

When payment goes through you land on a page that says You're in. If you leave checkout without paying, your organization is saved and nothing is charged; write to us and we will send you a new checkout link.

4. What happens next

Every early access team is onboarded by our engineers, as the plans page promises. Within your first days we:

1. Set up sign in. We create accounts for you and the people you name, each with a role: viewer, engineer, SCA, or admin. See Roles and access for what each role can do. We email you when your console is ready.
2. Connect your first application. Together we add the review component and a cdso_config.yml to your repository. Connecting your pipeline shows exactly what changes.
3. Run the first scan. Your pipeline scans the build and Attest turns the results into a worklist. Running the scans explains the job.
4. Do the first review on a call. Your reviewer works the first package with us, from the queue to a signed decision.

5. Your first week, by role

You are	Start with
A developer	Reading your worklist, then Fixing what blocks
A reviewer (SCA)	Your queue, then Reading a package
The risk owner	Security posture, then The record

Billing and your account

1. The subscription renews monthly through Stripe.
2. If a payment fails, everything keeps working for 15 days while you update the card. After that the organization is suspended: members can still sign in and see a billing notice with a link to pay, and nothing else until payment goes through.
3. Suspension never deletes anything. Paying again restores everything as it was.
4. To change the plan, the organization name, or cancel, write to us.

Help

Write to contact@ulap.co. A person reads every message and replies.