diff --git a/pyproject.toml b/pyproject.toml
index e14dff094..e9a4e5038 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -33,6 +33,7 @@ dependencies = [
   "pyjwt >= 2.1",
   "pyOpenSSL >= 23.0.0",
   "requests",
+  "rich ~= 13.0",
   "securesystemslib",
   "sigstore-protobuf-specs ~= 0.2.2",
   "sigstore-rekor-types >= 0.0.11",
diff --git a/sigstore/_cli.py b/sigstore/_cli.py
index 299eacf90..da1919570 100644
--- a/sigstore/_cli.py
+++ b/sigstore/_cli.py
@@ -24,6 +24,7 @@
 from typing import NoReturn, Optional, TextIO, Union, cast
 
 from cryptography.x509 import load_pem_x509_certificates
+from rich.logging import RichHandler
 from sigstore_protobuf_specs.dev.sigstore.bundle.v1 import Bundle
 
 from sigstore import __version__
@@ -61,7 +62,7 @@
 )
 from sigstore.verify.models import VerificationFailure
 
-logging.basicConfig()
+logging.basicConfig(format="%(message)s", datefmt="[%X]", handlers=[RichHandler()])
 logger = logging.getLogger(__name__)
 
 # NOTE: We configure the top package logger, rather than the root logger,