EverythingXiaomi
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your app
Vendor dashboard

Best Code Signing Software in 2026

Updated

In short: Cosign is ranked #1 of 26 as of 4 October 2026, ahead of SignPath and SignServer. The best-ranked option with a free plan is SignPath. The lowest first paid tier on this page is Bamboo Deploy at $15/mo.

Code signing software is relevant when you need to sign software releases and manage how that work happens. Compare certificate provided, cloud signing, and HSM key protection, then consider how approval workflows and CI/CD signing fit your release process. Supported targets and trusted timestamping help frame compatibility and signing details; free-plan availability and paid-from pricing add cost context. SignPath, SignServer, and DigiCert Software Trust Manager lead the ranking, with Cosign and Sigstore also among the first entries. The ranked order gives you a place to start, while the comparison points help you weigh key protection, signing methods, and the release environments you need to support.

26 code signing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

26ranked
5free plans on this page
$15/molowest paid tier
4 Oct 2026last checked
#1 Cosign Top pick · 7.3 Free plan · Free #2 SignPath Runner-up · 7.2 Free plan · Free #3 SignServer Also great · 7.2 Free plan · Free
  1. 1

    Cosign

    7.3
    Free plan LinuxmacOSself-hostedWindows
    Free plan
    Yes
    Supported targets
    OCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestations
    Certificate provided
    Yes
    Cloud signing
    No
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    Free About CosignVisit site
  2. 2

    SignPath

    7.2
    Free plan apiLinuxmacOSself-hostedWebWindows
    Free plan
    Yes
    Supported targets
    Windows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifacts
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    Free About SignPathVisit site
  3. 3

    SignServer

    7.2
    Free planFree trial apiLinuxmacOSself-hostedWebWindows
    Free plan
    Yes
    Supported targets
    Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    Free About SignServerVisit site
  4. 4

    Sigstore

    7.0
    Free plan apiLinuxmacOSself-hostedWindows
    Free plan
    Yes
    RecognisedDocumentedFree planPlatforms
    Free About SigstoreVisit site
  5. 5

    DigiCert Software Trust Manager

    6.8
    apiLinuxmacOSWebWindows
    Supported targets
    Windows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifacts
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About DigiCert Software Trust ManagerVisit site
  6. 6

    SignPath Foundation

    6.8
    Free plan apiWeb
    Free plan
    Yes
    Supported targets
    Windows executables and scripts, MSI, CAB, AppX/MSIX, NuGet, Java archives, Android packages, RPM, Debian packages, Office macros, XML, JSON, OCI container images, ClickOnce, and arbitrary files
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    Free About SignPath FoundationVisit site
  7. 7

    Red Hat Trusted Artifact Signer

    6.7
    LinuxmacOSself-hostedWebWindows
    Supported targets
    container images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML models
    Certificate provided
    Yes
    RecognisedDocumentedFree planPlatforms
    About Red Hat Trusted Artifact SignerVisit site
  8. 8

    Bamboo Deploy

    6.6
    apiLinuxmacOSWebWindows
    Free plan
    Yes
    Supported targets
    EXE, MSI, DLL
    Certificate provided
    Yes
    Cloud signing
    Yes
    RecognisedDocumentedFree planPlatforms
    $15/mofirst paid tier About Bamboo DeployVisit site
  9. 9

    SSL.com Certificate Lifecycle Management

    6.4
    apiWeb
    Free plan
    No
    Paid from
    129 /yr
    Supported targets
    Windows executables, drivers, installers, scripts, .exe, .dll, .msi, .cab, .sys, .ps1, Java code objects
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About SSL.com Certificate Lifecycle ManagementVisit site
  10. 10

    ComSignTrust Secure Code Signing Platform (ASCS)

    6.3
    apiWeb
    Supported targets
    CAB, COS, EXE, DLL and other Microsoft Authenticode files
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About ComSignTrust Secure Code Signing Platform (ASCS)Visit site
  11. 11

    Keyfactor Platform

    6.3
    Free trial apiself-hostedWeb
    RecognisedDocumentedFree planPlatforms
    About Keyfactor PlatformVisit site
  12. 12

    LAAVAT PKI and Signing Platform

    6.0
    Free trial apiself-hostedWeb
    Free plan
    No
    Supported targets
    NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signatures
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About LAAVAT PKI and Signing PlatformVisit site
  13. 13

    GoGetSSL Cloud Code Signing

    5.9
    WebWindowsmacOS
    Free plan
    No
    Paid from
    425 /yr
    Supported targets
    Adobe AIR applications; Mozilla object files; Apple Mac software; Java JAR applets; Microsoft Authenticode files including DLL, OCX, EXE, MSI, CAB and kernel software; Microsoft Office VBA files; Microsoft Silverlight applications
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    No
    RecognisedDocumentedFree planPlatforms
    About GoGetSSL Cloud Code SigningVisit site
  14. 14

    Notation

    5.9
    WindowsmacOSLinux
    Supported targets
    OCI container images and other OCI artifacts, including SBOMs
    Certificate provided
    No
    Cloud signing
    Yes
    RecognisedDocumentedFree planPlatforms
    About NotationVisit site
  15. 15

    OpenPubkey

    5.8
    WindowsmacOSLinux
    Free plan
    Yes
    Supported targets
    messages and artifacts
    Certificate provided
    No
    RecognisedDocumentedFree planPlatforms
    About OpenPubkeyVisit site
  16. 16

    Aujas Automated Code Signing Platform

    5.7
    Web
    Supported targets
    Windows files; Java JAR/WAR/EAR/HPI; Android APK; RPM; Linux files; Docker images; iOS/macOS DMG, IPA, PKG, APP; XAR; MAGE manifests; WHQL/HLK drivers; VSIX; DLL, EXE, JS, SYS, MSI, VBS, MSP, OCX, PS1, WSF, CAB; Debian packages; Helm charts
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About Aujas Automated Code Signing PlatformVisit site
  17. 17

    CyberArk Code Sign Manager - Self-Hosted

    5.6
    Windows
    Supported targets
    Code-signing keys and artifacts handled by integrated signing applications; specific target formats not confirmed
    Cloud signing
    No
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About CyberArk Code Sign Manager - Self-HostedVisit site
  18. 18

    GaraTrust

    5.6
    Supported targets
    Windows Authenticode, Kernel/WHQL, MSI/MSIX, NuGet, PowerShell, ClickOnce, macOS, iOS, Android APK/AAB, Java JAR, Docker, Notary v2, Linux RPM, DEB, GPG, firmware/UEFI, PDF, XML/XAdES, SBOM
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About GaraTrustVisit site
  19. 19

    PACE Code Signing Platform

    5.6
    Supported targets
    Windows, macOS, Linux, IoT binaries, AAX plug-ins
    Certificate provided
    Yes
    Cloud signing
    Yes
    RecognisedDocumentedFree planPlatforms
    About PACE Code Signing PlatformVisit site
  20. 20

    Signotaur

    5.6
    Windows
    Free plan
    No
    Supported targets
    Windows executables and installers, PowerShell scripts, AppX/MSIX, NuGet packages, VSIX packages, ClickOnce/VSTO manifests, RDP files, Apple configuration and provisioning profiles, CMS/PKCS#7 files, archives, PDF and XML documents
    Certificate provided
    Yes
    Cloud signing
    No
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About SignotaurVisit site
  21. 21

    The Update Framework

    5.6
    Free plan
    Yes
    Supported targets
    Software updates, repository target files, packages, and digital artifacts
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About The Update FrameworkVisit site
  22. 22

    AWS Signer

    5.5
    Web
    Supported targets
    AWS Lambda deployment packages; IoT and FreeRTOS firmware images; OCI container images
    Certificate provided
    Yes
    Cloud signing
    Yes
    RecognisedDocumentedFree planPlatforms
    About AWS SignerVisit site
  23. 23

    CodeLocker

    5.5
    Supported targets
    source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About CodeLockerVisit site
  24. 24

    Signo

    5.5
    Linux
    Supported targets
    Files; Windows executables via Authenticode
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About SignoVisit site
  25. 25

    sslTrus Remote Code Signing Service

    5.5
    Web
    Free plan
    No
    Paid from
    75 /yr
    Supported targets
    Adobe AIR applications, Firefox XPI extensions, macOS applications, Java JAR files, Microsoft Authenticode formats (.exe, .dll, .ocx, .msi, .cab and kernel drivers), Microsoft Office macro/VBA files, and Silverlight XAP files
    Certificate provided
    Yes
    Cloud signing
    Yes
    HSM key protection
    Yes
    RecognisedDocumentedFree planPlatforms
    About sslTrus Remote Code Signing ServiceVisit site

Is your app on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

#1 open#2 open#3 open#4 open#5 openClaim your listing — free

Questions about this list

Which code signing software is ranked first on Everything Xiaomi?

Cosign is ranked #1 of 26 with a score of 7.3. SignPath is second and SignServer third.

How many of these have a free plan?

5 of the 25 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, Bamboo Deploy has the lowest first paid tier we found: $15/mo.

How is this list ranked?

Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.

More in Developer Tools

All developer tools lists
Accessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Software Composition Analysis Software 64Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 55