Workflow bundle · ECZ-ID Service & Workload
ECZ-ID Machine Identity Assurance Bundle
Create one assurance workflow across machine identities that live in different environments.
A bundle for organisations operating services, workloads and the APIs they expose under one machine-identity programme.
- Type
- Bundle
- Price
- Not restated on this site; TrustOps publishes the current price and availability
- Acquired and paid in
- TrustOps
- Operated in · proved by
- Dashboard · Resolver
The problem
Why it matters.
Machine identities multiply across environments: services and workloads in clusters and clouds, and the APIs they expose. Each class has its own native identity system and its own review questions, so an organisation ends up with several disconnected programmes and no single account of the logical subjects it operates.
Built for
- Platform engineering
- Machine-identity programmes
- Connected estates
What changes
- One operating model across machine identity classes
- Reusable evidence
- Clearer entity separation
What you receive
Concrete deliverables, not a vague trust score.
- Relevant specialist kits
- Cross-entity identity mapping
- Machine-identity review artefacts
- Estate
- The machine-identity classes you operate — services and workloads, and the APIs they expose
- Subjects
- Each logical subject, with its own ECZ-ID
- Native identities
- The runtime identity system each class already uses, left where it is
- Operator
- The organisation that answers for each subject, with its Parent tier
- Boundary
- Each subject stays distinct — no universal credential is created
Illustrative structure. Native identifiers stay private; the Resolver shows only published records.
How it works
A short path from need to something usable.
Define the machine estate.
Map each logical subject.
Complete the relevant evidence.
Assemble the programme view.
How it relates to your Passport
Each subject keeps its own free Passport. For Service & Workload Passport holders the bundle brings the ECZ-ID Service & Workload Identity & Secretless Migration Kit together with the specialist products for the services, workloads and APIs you operate, in one programme.
Use cases
- Organisations running more than one class of machine identity — services, workloads and the APIs they expose — that want one programme for all of them.
- An organisation answering one machine-identity review instead of one per class.
- Keeping a service, the workload running it and the API it exposes as three distinct, related subjects.
Tiers and price
Price and availability
Prices and what can be bought today come from TrustOps, which owns every purchase, entitlement and renewal. This site does not restate this product's price; TrustOps publishes its current tiers, price and availability, and shows them before anything is bought.
How it is arranged
TrustOps acquires
TrustOps publishes the tiers and holds payment and entitlement whenever it is offered.
Dashboard operates
Once you hold it, it appears in your Dashboard, where you operate it.
Resolver proves
Public facts stay on the Resolver; holding it never changes what a record proves.
Privacy, security and evidence
What is collected, published and kept.
- Each subject keeps its own identity and record; the bundle creates no shared or universal credential.
- Native identifiers and account details stay private, and no provider IAM is changed.
- Publication of each record stays your decision.
Boundaries
The claims stop here.
- The bundle keeps each subject distinct; it does not create a universal credential.
Integrations and questions
Works with what you already run.
- Service & Workload and API Passports, as relevant.
- The workload identity systems and API gateways you already run, unchanged.
- Graph Intelligence for the relationships between subjects.
- Does the bundle create one identity for all my machines?
- No. Each logical subject keeps its own Passport. The bundle organises the programme; it never merges identities or creates a universal credential.
- Do I need every family's Passport?
- Only for the subjects you actually operate. Each Passport is free.
Related
- Service & Workload specialist kitECZ-ID Service & Workload Identity & Secretless Migration KitTurn workload identity and secretless-migration evidence into an implementation-ready kit.Read more
- Relationships · DependenciesECZ-ID Graph IntelligenceSee the relationships that make a machine-economy identity meaningful.Read more
- Portfolio suiteECZ-ID Digital Entity Trust SuiteBring the specialist assurance products into one portfolio-level programme.Read more
Keep the identity free. Everything above it is optional.
Your Service & Workload Passport stays free. ECZ-ID Machine Identity Assurance Bundle sits above it; TrustOps shows its current state.