Sigstore
7.6#1 in code signing softwareFree planFree planWebAPILinuxmacOS
VisitSigstore vs Wisec
What both publish
| Fact | Sigstore | Wisec |
|---|---|---|
| CI integrations | Sigstore provides GitHub Actions for generating signatures and installing Cosign, and documents GitLab CI installation. | Dedicated CI/CD support is listed for GitLab CI, GitHub Actions, Jenkins, and Azure DevOps; CircleCI and Travis CI are described as coming soon. |
| Purpose | Sigstore is an open source project for improving software supply chain security. | Wisec collects, signs, and preserves software build evidence such as provenance, SBOM, SLSA, and VEX for Cyber Resilience Act readiness. |
| Self-hosting | Sigstore provides scaffolding for running a full stack in Kubernetes, including KinD, and offers Google Cloud Terraform modules. | Self-hosting is available to Enterprise customers, with on-premise or private cloud deployment listed. |
| Support | Community support is provided through Slack and GitHub issues, with repository CODEOWNERS identifying project maintainers. | Free includes community support, Business lists email support with a 48-hour response, Pro lists priority support with a 24-hour response, and Enterprise lists dedicated 24/7 priority support. |
Sigstore plans
- FreeFree
- Public-good Sigstore serviceFree
Wisec plans
- FreeFree
- Business€990 a year
- Pro€2,990 a year
- EnterprisePriced on request
Pick Sigstore if…
Sigstore suits developers and software providers seeking signing and verification workflows for software artifacts. It may also be relevant to package managers integrating signing into their tooling or registries.
Pick Wisec if…
The Free plan is described for small projects and security exploration; Business is for growing teams that need notarization. Pro is aimed at organizations seeking full control, while Enterprise adds self-hosting options.