17.6
Sigstore is a free, open source project focused on software supply chain security.
Free planOpen sourceWebAPILinux
Best Code Signing Software in 2026
When signing software is part of your release process, the details to weigh include signing method, key protection and how approvals fit into the work. Compared on are approval workflows, certificate provided, CI/CD signing, cloud signing and HSM key protection, plus supported targets and trusted timestamping. Cosign, SignPath and SignServer are among the entries shown. Consider which environments your software…
27.2
SignPath provides code-signing and software-integrity controls for builds and releases.
Free planWebAPILinux
37.1
AWS Signer is a managed code-signing service that helps verify code integrity and publisher trust.
Free planWebAPILinux
- 4
Cosign
Cosign is a free tool for signing and verifying OCI container images and other software artifacts.
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
OpenPubkey links a user or workload identity verified through OpenID Connect to a public key, allowing that identity to sign messages and artifacts.
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
SignServer is a server-side platform for managing signing keys and digitally signing code, documents, and timestamps.
Free planWebAPILinuxmacOS6.5Free plan - 7
Aujas Automated Code Signing Platform
WebLinuxmacOSSelf-hosted6.3 - 8
Keyfactor Platform
Keyfactor Platform, through Keyfactor Command, helps teams discover and manage certificates across certificate authorities, clouds, and environments.
WebAPISelf-hosted6.3 - 9
sslTrus Remote Code Signing Service
sslTrus Remote Code Signing Service provides remote cloud signing for software applications.
WebLinuxmacOSWindows6.3From $75 a year - 10
Bamboo Deploy
Bamboo Deploy is a cloud code-signing service for developers of Windows apps.
WebAPILinuxmacOS6.2From $15 a month - 11
DigiCert Software Trust Manager
DigiCert Software Trust Manager helps teams control and automate software signing across release artifacts, tools, and people.
WebAPILinuxmacOS6.2 - 12
GoGetSSL Cloud Code Signing
GoGetSSL Cloud Code Signing lets organizations digitally sign software with a certificate accessed over the internet.
WebmacOSWindows6.1From $425 a year - 13
Notation
Notation is a free, open-source command-line tool for signing and verifying container images and other artifacts stored in OCI registries, including…
Free planLinuxmacOSWindows6.1Free plan - 14
Signotaur
Self-hostedWindows6.1$199 one-time - 15
CyberArk Code Sign Manager - Self-Hosted
CyberArk Code Sign Manager - Self-Hosted governs private code signing keys managed by Trust Protection Foundation.
WebAPILinuxmacOS6.0 - 16
SignPath Foundation
SignPath Foundation provides code-signing certificates to eligible open-source projects, linking published binaries to their source repositories.
Free planWebAPI6.0Free plan - 17
Red Hat Trusted Artifact Signer
Red Hat Trusted Artifact Signer (RHTAS) helps organizations sign and verify software artifacts, including container images, binaries, documents,…
WebLinuxmacOSSelf-hosted5.9 - 18
LAAVAT PKI and Signing Platform
WebAPISelf-hosted5.6 - 19
PACE Code Signing Platform
PACE Code Signing Platform helps software-platform publishers verify who created third-party applications and plug-ins and whether they changed after signing.
LinuxmacOSWindows5.6 - 20
Azure Artifact Signing
Azure Artifact Signing is a paid cloud service for signing software and other artifacts.
WebLinuxWindows5.5From $9.99 a month - 21
Signo
Signo is a free, open-source signing service that you self-host for file signatures and Windows Authenticode signing.
APILinuxSelf-hosted5.5 - 22
Code Signing Key Management Server (CSKMS)
Code Signing Key Management Server (CSKMS) is a self-hosted server that protects code-signing keys and signs firmware, applications, software images,…
APISelf-hosted5.4 - 23
CodeLocker
CodeLocker is a code-signing platform from Zeva for software supply-chain traceability and provenance.
5.4 - 24
ComSignTrust Secure Code Signing Platform (ASCS)
ComSignTrust Secure Code Signing Platform (ASCS) signs code files to authenticate their origin and integrity and identify the organization that developed them.
WebAPI5.4 - 25
The Update Framework
The Update Framework (TUF) is a free, open-source framework and specification for securing software update systems.
5.4