Chainguard
Chainguard provides hardened, secure, and production-ready builds of open source software components, including container images, language libraries, and virtual machi…
Free tierVisit site ↗
Our verdict
Who it's for
The trusted source for secure-by-default open source software components.
Who should look elsewhere
Specific pricing details for paid tiers require a custom quote.
Pros
- +Significantly reduces vulnerability counts (average 97.6% reduction in CVEs).
- +Accelerates compliance with regulations like FedRAMP, HIPAA, and PCI DSS.
- +Frees up engineering teams by minimizing CVE remediation and security overhead.
- +Provides transparent attestation and full software provenance with Sigstore signing.
- +Offers contractual CVE remediation SLAs for critical and high-severity issues.
Cons
- −Specific pricing details for paid tiers require a custom quote.
- −Backported CVE patching for language libraries is currently limited to Python.
Key features
- ✓Minimal, customizable, zero-CVE container images with CVE remediation SLA
- ✓Guarded catalog of malware-resistant language libraries (Python, Java, JavaScript)
- ✓Secure-by-design virtual machine images for various deployments
- ✓Continuously built from source in SLSA L2 hardened infrastructure with CVE patching
- ✓Sigstore signed artifacts with full build-time SBOMs and digital attestations
- ✓FIPS-validated and STIG-hardened images for compliance requirements
Pricing
No public pricing plans recorded.