Introduction

The Trust Center is a publicly accessible page where your organization can showcase its security posture to customers, partners, and stakeholders. It displays real-time metrics, compliance certifications, pentest results, and API monitoring data — all under your branding. This guide walks you through creating, configuring, and publishing your Trust Center.

Prerequisites

• Access to the Astra dashboard with appropriate workspace permissions

• Company logo ready (PNG with transparent background, 100x100 pixels recommended)

• Brand color hex code (e.g., #3076f8)

• At least one active target in your workspace

Instructions

1. Access the Trust Center

From the left sidebar, navigate to Trust Center. Select the workspace where you want the Trust Center created, then click New Trust Center.

2. Select targets

Your workspace is pre-selected and cannot be changed at this step. Choose which targets to include — select All Targets or click Select Targets to choose specific ones. Click Next to proceed.

3. Generate Trust Center content

Enter your company website URL and click Generate Trust Center. A side panel will display AI-generated content for your Trust Center. Review and edit the content as needed, then click Confirm.

You will be redirected to the Settings and Configuration page.

4. Configure general settings

On the Settings page, fill in the following:

• Brand Color — enter your primary brand color in hex format

• Targets Monitored — all targets are selected by default; adjust as needed

• Slug — set a unique URL path that will appear in your public Trust Center URL (e.g., slug.domain.com)

• Logo — upload your company logo by clicking the upload area or dragging and dropping the file

5. Configure content visibility

Toggle and edit each section to control what appears publicly on your Trust Center:

• Header Section — company name, logo, contact information, privacy policy, industry, founders, and office location. Toggle individual fields on or off as needed.

• Security Posture — real-time insights on vulnerability scanning, penetration testing, and CVE coverage

• Security Assessment — latest pentest results including tested targets, pentest date, certificate validity, and certificate link

• Compliance — compliance standards your organization follows such as SOC 2, ISO 27001, PCI-DSS, GDPR, HIPAA, and OWASP 2021

• APIs Monitored — overview of endpoints tracked, endpoints scanned via DAST, and endpoints pending scans

• Vulnerability Reporting — enables external users to report vulnerabilities they discover in your product

• FAQs — control what information is shared to align with your organization's messaging

Changes are saved automatically as you edit each section.

6. Set up the Trust Seal

Go to the Trust Seal section on the Settings page. Export the seal code and embed it on your website, landing pages, marketing materials, or product pages. When users click the seal, they are redirected to your public Trust Center.

7. Preview and publish

Use the Actions menu in the top-right corner:

• Preview — see how your Trust Center looks before going live

• Draft — save and continue editing privately

• Publish — make the Trust Center live and publicly accessible

• Unpublish — temporarily hide the Trust Center from public view without deleting it

Expected Outcome

Once published, your Trust Center will be accessible at your configured slug URL. Visitors can view your security posture, compliance certifications, pentest certificates, and API monitoring status in real time.

Troubleshooting

Slug URL not working after publishing — Confirm the slug is unique and contains no spaces or special characters. Allow a few minutes after publishing for the URL to become active.

AI-generated content is inaccurate — Review and manually edit the content in the side panel before clicking Confirm. All fields are editable.

Logo not displaying correctly — Ensure the file is PNG format with a transparent background and close to 100x100 pixels in size.

Trust Seal not redirecting correctly — Verify the embed code was copied correctly from the Settings page and that the Trust Center is in the Published state.