Alternatives to Gitsign

17.6

Sigstore

Sigstore is a free, open source project focused on software supply chain security.

Free planOpen sourceWebAPILinux

Free plan

VisitDetails

27.2

SignPath

SignPath provides code-signing and software-integrity controls for builds and releases.

Free planWebAPILinux

Free plan

VisitDetails

37.1

AWS Signer

AWS Signer is a managed code-signing service that helps verify code integrity and publisher trust.

Free planWebAPILinux

Free plan

VisitDetails

4. 4CO

   Cosign

   Cosign is a free tool for signing and verifying OCI container images and other software artifacts.

   Free planLinuxmacOSSelf-hostedWindows
   6.6Free plan
   Visit
5. 5OP

   OpenPubkey

   OpenPubkey links a user or workload identity verified through OpenID Connect to a public key, allowing that identity to sign messages and artifacts.

   Free planAPILinuxmacOSSelf-hosted
   6.6Free plan
   Visit
6. 6

   SignServer

   SignServer is a server-side platform for managing signing keys and digitally signing code, documents, and timestamps.

   Free planWebAPILinuxmacOS
   6.5Free plan
   Visit
7. 7AA

   Aujas Automated Code Signing Platform

   WebLinuxmacOSSelf-hosted
   6.3
   Visit
8. 8

   Keyfactor Platform

   Keyfactor Platform, through Keyfactor Command, helps teams discover and manage certificates across certificate authorities, clouds, and environments.

   WebAPISelf-hosted
   6.3
   Visit
9. 9SR

   sslTrus Remote Code Signing Service

   sslTrus Remote Code Signing Service provides remote cloud signing for software applications.

   WebLinuxmacOSWindows
   6.3From $75 a year
   Visit
10. 10

    Bamboo Deploy

    Bamboo Deploy is a cloud code-signing service for developers of Windows apps.

    WebAPILinuxmacOS
    6.2From $15 a month
    Visit
11. 11

    DigiCert Software Trust Manager

    DigiCert Software Trust Manager helps teams control and automate software signing across release artifacts, tools, and people.

    WebAPILinuxmacOS
    6.2
    Visit
12. 12GC

    GoGetSSL Cloud Code Signing

    GoGetSSL Cloud Code Signing lets organizations digitally sign software with a certificate accessed over the internet.

    WebmacOSWindows
    6.1From $425 a year
    Visit
13. 13NO

    Notation

    Notation is a free, open-source command-line tool for signing and verifying container images and other artifacts stored in OCI registries, including…

    Free planLinuxmacOSWindows
    6.1Free plan
    Visit
14. 14SI

    Signotaur

    Self-hostedWindows
    6.1$199 one-time
    Visit
15. 15

    CyberArk Code Sign Manager - Self-Hosted

    CyberArk Code Sign Manager - Self-Hosted governs private code signing keys managed by Trust Protection Foundation.

    WebAPILinuxmacOS
    6.0
    Visit
16. 16

    SignPath Foundation

    SignPath Foundation provides code-signing certificates to eligible open-source projects, linking published binaries to their source repositories.

    Free planWebAPI
    6.0Free plan
    Visit
17. 17RH

    Red Hat Trusted Artifact Signer

    Red Hat Trusted Artifact Signer (RHTAS) helps organizations sign and verify software artifacts, including container images, binaries, documents,…

    WebLinuxmacOSSelf-hosted
    5.9
    Visit
18. 18LP

    LAAVAT PKI and Signing Platform

    WebAPISelf-hosted
    5.6
    Visit
19. 19PC

    PACE Code Signing Platform

    PACE Code Signing Platform helps software-platform publishers verify who created third-party applications and plug-ins and whether they changed after signing.

    LinuxmacOSWindows
    5.6
    Visit
20. 20

    Azure Artifact Signing

    Azure Artifact Signing is a paid cloud service for signing software and other artifacts.

    WebLinuxWindows
    5.5From $9.99 a month
    Visit
21. 21SI

    Signo

    Signo is a free, open-source signing service that you self-host for file signatures and Windows Authenticode signing.

    APILinuxSelf-hosted
    5.5
    Visit
22. 22CS

    Code Signing Key Management Server (CSKMS)

    Code Signing Key Management Server (CSKMS) is a self-hosted server that protects code-signing keys and signs firmware, applications, software images,…

    APISelf-hosted
    5.4
    Visit
23. 23

    CodeLocker

    CodeLocker is a code-signing platform from Zeva for software supply-chain traceability and provenance.
    5.4
    Visit
24. 24CS

    ComSignTrust Secure Code Signing Platform (ASCS)

    ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them.

    WebAPI
    5.4
    Visit
25. 25TU

    The Update Framework

    The Update Framework (TUF) is a free, open-source framework and specification for securing software update systems.
    5.4
    Visit
26. 26SC

    SSL.com eSigner for Code

    WebLinuxmacOSWindows
    5.1
    Visit
27. 27GA

    GaraTrust

    GaraTrust is enterprise code-signing software for binaries, containers, drivers, packages, firmware, and SBOMs.

    Self-hosted
    5.0
    Visit

Back to Gitsign