Cosign
6.6#4 in code signing softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitCosign vs CyberArk Code Sign Manager - Self-Hosted
CyberArk Code Sign Manager - Self-Hosted
6.0#15 in code signing softwareWebAPILinuxmacOS
VisitWhat both publish
| Fact | Cosign | CyberArk Code Sign Manager - Self-Hosted |
|---|---|---|
| Purpose | Cosign signs and verifies OCI containers and other software artifacts. | Protects and governs use of private code signing keys managed by Trust Protection Foundation. |
| Support | The project directs users with issues to open a GitHub issue or ask in its Slack channel. | The maker says existing customers can continue to access product documentation, support, and guidance, and should use their existing support path for product-specific help. |
Cosign plans
- CosignFree
CyberArk Code Sign Manager - Self-Hosted plans
No prices published.
Pick Cosign if…
Cosign suits open-source package managers and teams that need to sign or verify artifacts in registry and CI/CD workflows. It is less suited to developers seeking a stable API for direct application integration.
Pick CyberArk Code Sign Manager - Self-Hosted if…
It suits organizations that need to govern private code-signing key use with access restrictions, approvals, and auditing. It is also relevant to teams signing through Windows, Linux, or macOS clients within a Trust Protection Foundation deployment.