SignPath

Code signing platform with key protection and automated signing for build pipelines.

Pricing: free, custom
Free tier: true
Open source: No

Editorial review

SignPath has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://docs.signpath.io/Verified
Tags(open-source;cloud-native): code signing, software supply chain, compliance, DevOpsVerified

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): SaaS, self-hostedVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): free, customVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): pipeline integrity and build provenance verification, semantic code signing, software attestation with SLSA and in-toto, signing policy enforcement, signed SBOMsVerification pending

Security · Privacy · Compliance

Regulatory compliance(HIPAA;PCI DSS;FedRAMP;GDPR support): EU Cyber Resilience Act (CRA), NIS2, NIST SSDF, IEC 62443Verification pending

Audience · Use · Case

Best for(Neutral editorial summary): Open-source projects and security teams needing policy-enforced, audit-ready release signingVerification pending
Company-size fit(individual;SMB;mid-market;enterprise): individual, SMB, enterpriseVerification pending
Primary use cases(build;monitor;automate): software release signing for open-source projects, supply chain security and audit-ready releasesVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.