Trust
Security & compliance
The vendor hasn’t added security or compliance details yet.
Open-source project providing free code signing and verification infrastructure for software supply chain integrity and provenance.
Pricing
Free
Founded
2021
Team size
11-50 employees
Headquarters
Mountain View, CA
Preview from sigstore.dev
At a glance
Best for
Software Developers
Try before you buy
Free plan
About Sigstore
Sigstore is an open-source software supply-chain security project that makes signing, verifying and proving the provenance of software artifacts easy and free. It provides keyless signing via short-lived certificates (Fulcio), a transparency log (Rekor) and the cosign tool for containers and packages. It targets developers and organizations securing their build and release pipelines.
Procurement & Fit
Structured facts from the vendor to help your security, finance, and procurement reviews move faster.
Pricing
Commercial model
Pricing model: Not specified
Free trial: No
Free plan: Yes
Contract minimum: Not specified
Procurement
Purchasing & legal
The vendor hasn’t added purchasing & legal details yet.
Fit
Best-fit company size
Company-size fit has not been specified yet.
Buyer Fit & Positioning
Implementation & Procurement
Commercial Fit & Ecosystem
Proof, Outcomes & Momentum
Alternatives, Migration & Buyer Objections
Buy through Cubbie
Sigstore
Sigstore doesn’t have a live offer on Cubbie yet — but you can still buy it through us. Request it and Cubbie’s procurement team will source pricing, negotiate terms, and set up the purchase for you.
Want a negotiated price? Request a quote for Sigstore and Cubbie routes it to the vendor and our procurement team.