Bamboo Deploy
Bamboo Deploy is a cloud code-signing service for developers of Windows apps.
What Bamboo Deploy is
Bamboo Deploy is a cloud code-signing service for developers of Windows apps. It checks uploaded binaries for malware indicators, risky behavior, obfuscation or packing, and existing Authenticode signatures before signing eligible files. Supported uploads include 32- and 64-bit EXE, MSI, and DLL files, plus MSIX and APPX packages. Signatures use Authenticode SHA-256 with a Sectigo Extended Validation certificate. Teams can connect signing with GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, or other tools able to make HTTP requests. Developer tooling includes a CLI, REST API, electron-builder hook, and integrations for .NET, CMake, Rust, Tauri, Go, Python/PyInstaller, and Inno Setup. The CLI works on Windows, macOS, and Linux with Node 18 or newer. Free accounts can upload and scan, but signing requires Premium at $15 a month, billed $45 every 3 months, with up to 50 apps and 1GB of cloud hosting. New accounts have sign requests reviewed, and high-confidence malicious indicators prevent signing.
Good
- Scans binaries for malware indicators and risky behavior.
- Signs eligible files using Authenticode SHA-256.
- Connects to several named CI systems.
- CLI supports Windows, macOS, and Linux with Node 18 or newer.
Watch out
- Free tier allows uploads and scans but not signing.
- New accounts have sign requests reviewed.
- High-confidence malicious matches are not signed.
- Premium is billed $45 every 3 months.
Who it suits
It suits Windows app developers who need binary scanning and code signing within build pipelines. Teams using the free tier can upload and scan, but must move to Premium for signing.
Verdict
Bamboo Deploy combines binary checks and Windows app signing with CI integrations and developer tooling. Free use covers uploads and scans; signing requires Premium and an initial review for new accounts.
Plans and prices
From Bamboo Deploy's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Premium | $15 a month | Up to 50 apps · 1GB cloud hosting · $45 every 3 months |
The facts
Each one read from Bamboo Deploy's own pages, with the date it was checked.
Where it runs
- App limit
- Premium includes support for up to 50 apps.checked 3 Oct 2026
- Supported build platforms
- The CLI works on Windows, macOS, and Linux with Node 18 or newer.checked 3 Oct 2026
What it does
- CI integrations
- The service supports signing through GitHub Actions, GitLab CI, Jenkins, CircleCI, Azure Pipelines, and other tools that can make HTTP requests.checked 3 Oct 2026
- Developer tooling
- Its developer docs describe a CLI, REST API, electron-builder hook, and integrations for .NET, CMake, Rust, Tauri, Go, Python/PyInstaller, and Inno Setup.checked 3 Oct 2026
- File support
- It supports Windows .exe, .msi, and .dll files in 32-bit and 64-bit, plus MSIX and APPX packages.checked 3 Oct 2026
- Guarantee
- The service offers a 30-day money-back guarantee; its FAQ describes this as a refund upon contacting support if the user decides it is not a fit.checked 3 Oct 2026
- Hosting
- Premium includes 1GB of cloud hosting for app deployments.checked 3 Oct 2026
- Malicious files
- Apps matching high-confidence malicious indicators will not be signed, and flagged scans show the indicators in the dashboard.checked 3 Oct 2026
- Privacy
- The privacy policy says Bamboo Deploy does not use cookies or sell visitors’ personal information to third parties.checked 3 Oct 2026
- Security scanning
- Uploaded binaries are checked for malware indicators, risky behavioral signals, obfuscation or packing, and existing Authenticode signature status.checked 3 Oct 2026
- Signing certificate
- Bamboo Deploy says signed apps use Authenticode SHA-256 with its Sectigo Extended Validation certificate.checked 3 Oct 2026
- Signing limits
- New accounts have sign requests reviewed by an operator, and enabling Auto-sign requires an initial reviewed build and a request to Bamboo Deploy.checked 3 Oct 2026
- What it does
- Bamboo Deploy is a cloud code signing service for Windows app developers that scans, certifies, and signs uploaded binaries.checked 3 Oct 2026
Money
- Free use
- Uploads and scans work on the Free tier without a subscription, while signing requires Premium.checked 3 Oct 2026
Alternatives to Bamboo Deploy
- 1
Sigstore
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 2
SignPath
Free planWebAPILinuxmacOS7.2Free plan - 3
AWS Signer
Free planWebAPILinuxmacOS7.1Free plan - 4
Cosign
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
Free planWebAPILinuxmacOS6.5Free plan