diff --git a/VMware/README.md b/VMware/README.md
index 5ba41fe..a62c4b4 100644
--- a/VMware/README.md
+++ b/VMware/README.md
@@ -1,5 +1,5 @@
 * [VMware](https://www.vmware.com/) is an enthusiastic participant in the sigstore community. As a leading provider of enterprise Kubernetes software through the [Tanzu](https://tanzu.vmware.com/) portfolio, we look to sigstore as an important set of tools for helping our customers better secure the software supply chain for modern applications.
 * R&D staff are working on Tanzu solutions using Cosign, and we are spearheading Cosign integration into [kpack](https://github.com/pivotal/kpack), [Carvel](https://carvel.dev/), and [Harbor](https://goharbor.io/).
-* [VMware Tanzu Application Platform](https://tanzu.vmware.com/application-platform) is a modular, application-aware platform that provides a rich set of developer tooling and a prepaved path to production. We are utilizing cosign from sigstore as our signing tool for developers. Cosign helps to provide an irrefutable proof of the integrity and authenticity of the produced artefacts.
+* [VMware Tanzu Application Platform](https://tanzu.vmware.com/application-platform) is a modular, application-aware platform that provides a rich set of developer tooling and a prepaved path to production. We are utilizing cosign as our signing tool for developers, and policyt-controller from sigstore as our validation tool for the platform. Cosign helps to provide an irrefutable proof of the integrity and authenticity of the produced artefacts.
 
-Copyright 2021 VMware, Inc. 
+Copyright 2022 VMware, Inc. 
diff --git a/Venafi/README.md b/Venafi/README.md
new file mode 100644
index 0000000..9f7a3ba
--- /dev/null
+++ b/Venafi/README.md
@@ -0,0 +1,14 @@
+# Venafi, Inc.
+
+[Venafi](https://www.venafi.com) is the leader in machine identity management.
+
+[Venafi CodeSign Protect](https://venafi.com/codesign-protect/) integrates with sigstore/cosign via PKCS#11 to provide strong controls over the enterprise code signing keys and certificates, used to sign container images and other artifacts such as SBOMs.
+
+Venafi also uses sigstore/cosign to sign its internally developed container images.
+
+[Jetstack](https://jetstack.io), a Venafi company, helps businesses to build and operate modern cloud native infrastructure with Kubernetes.
+
+Jetstack also designed and maintains the CNCF [cert-manager](https://github.com/cert-manager/cert-manager) project – the de facto cloud native solution for developers to automate TLS and mTLS certificate issuance and renewal.
+
+* Jetstack is an active user of the sigstore project
+* We use sigstore/cosign to sign our open source container images along with [SLSA provenance](https://slsa.dev/provenance/v0.2) and a [CycloneDX SBOM](https://cyclonedx.org/).