EVERYTHING XIAOMI
Get listed
27 alternatives · from code signing software

Alternatives to Cosign

Cosign signs and verifies OCI containers and other software artifacts, with free access across Linux, macOS, Windows, and self-hosted environments. Its default keyless workflow uses ephemeral keys, short-lived Fulcio certificates, and Rekor transparency records; users can also use hardware or KMS signing, generated encrypted keypairs, or bring their own PKI. Signatures can live alongside container images in OCI registries, and Cosign supports generic OCI artifacts and…

17.6
Sigstore logo

Sigstore is a free, open source project focused on software supply chain security.

Free planOpen sourceWebAPILinux
Free plan
VisitDetails
27.2
SignPath logo

SignPath provides code-signing and software-integrity controls for builds and releases.

Free planWebAPILinux
Free plan
VisitDetails
37.1
AWS Signer logo

AWS Signer is a managed code-signing service that helps verify code integrity and publisher trust.

Free planWebAPILinux
Free plan
VisitDetails
  1. 4

    OpenPubkey

    OpenPubkey links a user or workload identity verified through OpenID Connect to a public key, allowing that identity to sign messages and artifacts.

    Free planAPILinuxmacOSSelf-hosted
    6.6Free plan
    Visit
  2. 5SignServer logo

    SignServer

    SignServer is a server-side platform for managing signing keys and digitally signing code, documents, and timestamps.

    Free planWebAPILinuxmacOS
    6.5Free plan
    Visit
  3. 6

    Aujas Automated Code Signing Platform

    WebLinuxmacOSSelf-hosted
    6.3
    Visit
  4. 7Keyfactor Platform logo

    Keyfactor Platform

    Keyfactor Platform, through Keyfactor Command, helps teams discover and manage certificates across certificate authorities, clouds, and environments.

    WebAPISelf-hosted
    6.3
    Visit
  5. 8

    sslTrus Remote Code Signing Service

    sslTrus Remote Code Signing Service provides remote cloud signing for software applications.

    WebLinuxmacOSWindows
    6.3From $75 a year
    Visit
  6. 9Bamboo Deploy logo

    Bamboo Deploy

    Bamboo Deploy is a cloud code-signing service for developers of Windows apps.

    WebAPILinuxmacOS
    6.2From $15 a month
    Visit
  7. 10DigiCert Software Trust Manager logo

    DigiCert Software Trust Manager

    DigiCert Software Trust Manager helps teams control and automate software signing across release artifacts, tools, and people.

    WebAPILinuxmacOS
    6.2
    Visit
  8. 11

    GoGetSSL Cloud Code Signing

    GoGetSSL Cloud Code Signing lets organizations digitally sign software with a certificate accessed over the internet.

    WebmacOSWindows
    6.1From $425 a year
    Visit
  9. 12

    Notation

    Notation is a free, open-source command-line tool for signing and verifying container images and other artifacts stored in OCI registries, including…

    Free planLinuxmacOSWindows
    6.1Free plan
    Visit
  10. 13

    Signotaur

    Self-hostedWindows
    6.1$199 one-time
    Visit
  11. 14CyberArk Code Sign Manager - Self-Hosted logo

    CyberArk Code Sign Manager - Self-Hosted

    CyberArk Code Sign Manager - Self-Hosted governs private code signing keys managed by Trust Protection Foundation.

    WebAPILinuxmacOS
    6.0
    Visit
  12. 15SignPath Foundation logo

    SignPath Foundation

    SignPath Foundation provides code-signing certificates to eligible open-source projects, linking published binaries to their source repositories.

    Free planWebAPI
    6.0Free plan
    Visit
  13. 16

    Red Hat Trusted Artifact Signer

    Red Hat Trusted Artifact Signer (RHTAS) helps organizations sign and verify software artifacts, including container images, binaries, documents,…

    WebLinuxmacOSSelf-hosted
    5.9
    Visit
  14. 17

    LAAVAT PKI and Signing Platform

    WebAPISelf-hosted
    5.6
    Visit
  15. 18

    PACE Code Signing Platform

    PACE Code Signing Platform helps software-platform publishers verify who created third-party applications and plug-ins and whether they changed after signing.

    LinuxmacOSWindows
    5.6
    Visit
  16. 19Azure Artifact Signing logo

    Azure Artifact Signing

    Azure Artifact Signing is a paid cloud service for signing software and other artifacts.

    WebLinuxWindows
    5.5From $9.99 a month
    Visit
  17. 20

    Signo

    Signo is a free, open-source signing service that you self-host for file signatures and Windows Authenticode signing.

    APILinuxSelf-hosted
    5.5
    Visit
  18. 21

    Code Signing Key Management Server (CSKMS)

    Code Signing Key Management Server (CSKMS) is a self-hosted server that protects code-signing keys and signs firmware, applications, software images,…

    APISelf-hosted
    5.4
    Visit
  19. 22CodeLocker logo

    CodeLocker

    CodeLocker is a code-signing platform from Zeva for software supply-chain traceability and provenance.

    5.4
    Visit
  20. 23

    ComSignTrust Secure Code Signing Platform (ASCS)

    ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them.

    WebAPI
    5.4
    Visit
  21. 24

    The Update Framework

    The Update Framework (TUF) is a free, open-source framework and specification for securing software update systems.

    5.4
    Visit
  22. 25

    SSL.com eSigner for Code

    WebLinuxmacOSWindows
    5.1
    Visit
  23. 26

    GaraTrust

    GaraTrust is enterprise code-signing software for binaries, containers, drivers, packages, firmware, and SBOMs.

    Self-hosted
    5.0
    Visit
  24. 27

    Gitsign

    LinuxmacOSWindows
    4.7
    Visit

Back to Cosign