Phylum vs Sigstore
PhylumSupply Chain Security
SigstoreSupply Chain Security
FreePublished price
Phylum Supply Chain Security Software supply chain security platform. | Sigstore Supply Chain Security sign. verify. protect. Make sure your software is what it claims to be. | |
|---|---|---|
| Overview | ||
| Category | Supply Chain Security | Supply Chain Security |
| What it is | Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities. | Open-source project providing free code signing and verification infrastructure for software supply chain integrity and provenance. |
| Pricing | ||
| Published price | Phylum does not publish a reliable numeric rate card. Pricing is treated conservatively as custom until a current vendor or authorized channel price can be cited. | Free Sigstore is a free, open-source project under the OpenSSF (Linux Foundation) with no paid tier. Its public-good signing infrastructure (Fulcio, Rekor, cosign) is free to use; ther… |
| Pricing model | Custom quote | Not available |
| Free options | Free plan · No free trial | Free plan · No free trial |
| Deal on Cubbie | None right now | None right now |
| Company | ||
| Founded | 2020 | 2021 |
| Team size | 11-50 employees | 11-50 employees |
| Headquarters | Evergreen, Colorado | Mountain View, CA |
| Featured clients | Security-conscious enterprises | Not available |