PACE Code Signing Platform
PACE Code Signing Platform helps software-platform publishers verify who created third-party applications and plug-ins and whether they changed after signing.
What PACE Code Signing Platform is
PACE Code Signing Platform helps software-platform publishers verify who created third-party applications and plug-ins and whether they changed after signing. A host can validate a module’s signature, while PACE’s Web of Trust can also let participating modules validate one another. It supports Windows, macOS, Linux, IoT binaries, and formats such as AAX. PACE says its signatures work with modern operating-system signing, allowing a module to be signed once and checked by both the operating system and the customer’s ecosystem. Developers can sign manually or automate the process with on-premises or cloud CI systems. PACE hosts the managed platform infrastructure, acts as certificate authority, and operates the PKI. Signing private keys remain in iLok USB devices, including when using Cloud Signing Service. Third-party developers are registered in PACE’s database for reporting and management. For AAX onboarding, PACE’s guide directs developers to contact Avid for tools and describes cloud signing for automated CI pipelines. PACE says customers receive documentation, support, and engineering-team access. Pricing is on request.
Good
- Supports Windows, macOS, Linux, and IoT binaries
- Offers cloud and CI signing workflows
- PACE hosts the certificate and PKI infrastructure
- Signing keys are kept in iLok USB devices
Watch out
- Code signing alone does not prevent reverse engineering
- Pricing is on request
- AAX developers should contact Avid for tools
Who it suits
The platform is designed for publishers that run third-party applications or plug-ins, particularly ecosystems involving multiple tools and high-value content. It suits teams that need manual or CI-based signing across the listed targets.
Verdict
PACE provides managed signing infrastructure and workflows for publishers validating third-party modules. Signing does not by itself protect software from reverse engineering, so account for that limitation when assessing protection needs.
Plans and prices
From PACE Code Signing Platform's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| PACE Code Signing Platform | Priced on request | Quote requested from PACE |
The facts
Each one read from PACE Code Signing Platform's own pages, with the date it was checked.
What it does
- AAX onboarding
- PACE’s AAX code-signing guide says developers should start by contacting Avid to request the tools, and describes cloud signing for automated CI pipelines.checked 9 Oct 2026
- Build automation
- Third-party developers can sign modules manually or automate signing with on-premises or cloud-based CI systems.checked 9 Oct 2026
- Developer management
- Registered third-party developers are stored in PACE’s database for reporting and management.checked 9 Oct 2026
- Developer records
- The platform registers third-party developers in PACE’s database for reporting and management.checked 9 Oct 2026
- Hosted service
- PACE hosts the platform infrastructure as a managed solution.checked 9 Oct 2026
- Intended users
- The platform is designed for software-platform publishers that run third-party applications or plug-ins, and for ecosystems where multiple tools handle high-value content.checked 9 Oct 2026
- Key storage
- PACE says signing keys are kept in iLok USB devices, including when signing through its Cloud Signing Service.checked 9 Oct 2026
- Limit
- PACE states that code signing alone does not protect the platform or modules from reverse engineering; it says additional tooling is required for that.checked 9 Oct 2026
- Managed PKI
- PACE acts as the certificate authority and hosts the PKI infrastructure for the platform.checked 9 Oct 2026
- Notable limit
- Code signing alone does not defend a platform or its modules against reverse engineering; PACE points to Fusion and White-Box Works for additional protection.checked 9 Oct 2026
- Purpose
- The platform lets software publishers verify that third-party applications and plug-ins come from trusted developers and have not been modified.checked 9 Oct 2026
- Signing keys
- PACE says signing private keys are kept in iLok USB devices, including when developers use its Cloud Signing Service.checked 9 Oct 2026
- Signing workflows
- Third-party developers can sign manually or automate signing through on-premises or cloud-based CI systems.checked 9 Oct 2026
- Support
- PACE says customers receive full documentation, quality support, and access to its engineering team.checked 9 Oct 2026
- Supported binaries
- The platform supports Windows, macOS, Linux, and IoT binaries, as well as formats such as AAX.checked 9 Oct 2026
- Verification
- Signatures let a platform verify a module’s developer and whether the module has changed since signing.checked 9 Oct 2026
- Web of Trust
- Its Web of Trust can let participating modules validate one another’s signatures as well as the host platform validating them.checked 9 Oct 2026
The company
- Founded
- 1985checked 28 Sep 2026
- Headquarters
- Silicon Valley, California, USAchecked 28 Sep 2026
- Maker
- PACE Anti-Piracy says it has provided software protection solutions since 1985 and is based in Silicon Valley, California.checked 9 Oct 2026
Where it runs
- OS compatibility
- PACE says its signatures are compatible with modern operating-system signing, so a module can be signed once and validated by both the OS and the customer’s ecosystem.checked 9 Oct 2026
Alternatives to PACE Code Signing Platform
- 1
Sigstore
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 2
SignPath
Free planWebAPILinuxmacOS7.2Free plan - 3
AWS Signer
Free planWebAPILinuxmacOS7.1Free plan - 4
Cosign
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
Free planWebAPILinuxmacOS6.5Free plan