Freedom251 › Software Supply Chain Security Software
Determinate Systems
What Determinate Systems is
Determinate Systems provides a Nix toolchain for installation, collaboration, and deployment across developer laptops, CI, cloud, and edge devices. Its platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. Determinate Nix is a validated distribution with lazy trees, parallel evaluation, stable flakes enabled by default, and a native Linux builder for macOS. FlakeHub provides binary caching, private flakes, organization access controls, and semantic versioning for flakes; its fh apply command can deploy NixOS, Home Manager, and nix-darwin configurations without local Nix evaluation. Secure Packages is a commercially supported Nixpkgs replacement with a curated package set and cryptographic signing. Its supply-chain tools include CycloneDX 1.5 SBOM generation, policy checks, and vulnerability scanning. The maker says critical vulnerabilities are patched within 7 days of disclosure. Each distribution is supported for at least 12 months, and one in four is an LTS release with 60 months of support. The maker says FlakeHub is FedRAMP High authorized and package builds use SOC 2 Type II infrastructure. A free plan is listed.
Who it suits
Determinate Systems suits individuals and engineering organizations using Nix across laptops, CI, cloud, or edge devices. Its security and compliance features are aimed in part at teams with demanding security requirements.
What it does well
- Combines Nix, FlakeHub, and Secure Packages.
- FlakeHub supports private flakes and organization access controls.
- Secure Packages includes signing, SBOMs, and vulnerability scanning.
- Critical vulnerabilities are patched within 7 days of disclosure.
- Free plan is listed.
What to know first
- Custom development is not included in Enterprise Nix Support.
- Package support varies; one in four distributions is LTS.
- A free plan is listed, but no specific limits are provided.
Limits
Each versioned distribution is supported for at least 12 months; one in four is an LTS distribution with 60 months of support. Custom development is not included in Enterprise Nix Support.
Getting started
- Visit the Determinate Systems website.
- Choose the free plan or review the available enterprise offerings.
- Install Determinate Nix on macOS, a supported Linux system, or Windows Subsystem for Linux.
- Use the individual getting-started guide to begin configuring Nix.
- Connect FlakeHub using a supported identity provider or authentication flow.
Verdict
Determinate Systems brings Nix distribution, collaboration, deployment, and curated packages into one platform. Its package support and enterprise response commitments are specific, while custom development is not included in enterprise support.
Questions
Is Determinate Systems free?
A free plan is listed, and the pricing model is freemium.
Which platforms does Determinate support?
The listed platforms are Linux, macOS, web, and Windows. Installation guidance covers macOS, most Linux systems, Windows Subsystem for Linux, and NixOS.
What products make up the platform?
The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages.
Which identity and authentication services does FlakeHub support?
FlakeHub supports authentication with GitHub, Microsoft Entra, and Okta. Its documented JWT sources include GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud.
What does Enterprise Nix Support include?
It includes a dedicated Slack channel, critical-issue investigation within one business hour, and a target of a fix or mitigation within five business days. Custom development may be available but is not included.
Facts from Determinate Systems's own pages
- Authentication integrations
- FlakeHub supports authentication with GitHub, Microsoft Entra, and Okta, and accepts JWTs from GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud. · determinate.systems, 30 Sept 2026
- Company origin
- Determinate Systems was founded by Eelco Dolstra, creator of Nix, and Graham Christensen, a long-time Nix community leader and systems engineer. · determinate.systems, 30 Sept 2026
- Compliance
- The maker says FlakeHub is FedRAMP High authorized and its package builds use SOC 2 Type II infrastructure. · determinate.systems, 30 Sept 2026
- Configuration deployment
- FlakeHub's fh apply can deploy NixOS, Home Manager, and nix-darwin configurations without local Nix evaluation. · determinate.systems, 30 Sept 2026
- Core products
- The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. · determinate.systems, 30 Sept 2026
- CVE remediation
- The Secure Packages page says critical vulnerabilities are patched within 7 days of disclosure. · determinate.systems, 30 Sept 2026
- Determinate Nix
- Determinate Nix is a validated distribution of Nix with parallel evaluation, lazy trees, stable flakes enabled by default, and a native Linux builder for macOS. · determinate.systems, 30 Sept 2026
- Enterprise support
- Enterprise Nix Support includes a dedicated Slack channel, critical-issue investigation within one business hour, and a fix or mitigation target within five business days. · determinate.systems, 30 Sept 2026
- FlakeHub
- FlakeHub provides binary caching, private flakes, organization access controls, and semantic versioning for Nix flakes. · determinate.systems, 30 Sept 2026
- Headquarters
- Pittsfield, Massachusetts, United States · determinate.systems, 28 Sept 2026
- Integrations
- FlakeHub documents authentication with GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud, and identity-provider support for GitHub, Microsoft Entra, and Okta. · determinate.systems, 30 Sept 2026
- Intended customers
- The company describes Determinate as Nix for work and organizations with demanding security requirements, while also providing an individual getting-started guide. · docs.determinate.systems, 30 Sept 2026
- Nix distribution
- Determinate Nix is a validated downstream distribution with lazy trees, parallel evaluation, stable flakes enabled by default, and a native Linux builder for macOS. · determinate.systems, 30 Sept 2026
- Package support
- Each distribution is supported for at least 12 months, and one in four is an LTS distribution with 60 months of support. · determinate.systems, 30 Sept 2026
- Package support limits
- Each versioned distribution is supported for at least 12 months, and one in every four distributions is an LTS distribution with 60 months of support. · determinate.systems, 30 Sept 2026
- Platform components
- The Determinate platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. · determinate.systems, 30 Sept 2026
- Platform support
- Determinate is available for macOS, most Linux systems, and Windows Subsystem for Linux; the maker also documents NixOS installation. · docs.determinate.systems, 30 Sept 2026
- Product
- Determinate is an end-to-end Nix toolchain spanning installation, collaboration, and deployment. · docs.determinate.systems, 30 Sept 2026
- Secure packages
- Determinate Secure Packages is a commercially supported drop-in replacement for Nixpkgs with a curated package set and cryptographic signing. · determinate.systems, 30 Sept 2026
- Security and compliance
- The maker says its infrastructure is SOC 2 Type II compliant and FlakeHub is FedRAMP High authorized. · determinate.systems, 30 Sept 2026
- Supply-chain tools
- Secure Packages includes access to FlakeBOM for CycloneDX 1.5 SBOM generation and FlakeAudit for policy checks and vulnerability scanning. · determinate.systems, 30 Sept 2026
- Support limit
- Custom development may be available through Enterprise Nix Support but is not included. · determinate.systems, 30 Sept 2026
- Use cases
- The platform is designed for coding agents, developer laptops, CI, cloud, and edge devices. · determinate.systems, 30 Sept 2026
- What it does
- Determinate is a platform for using Nix across developer laptops, CI, cloud infrastructure, and edge devices. · determinate.systems, 30 Sept 2026