Iron Bank Registry1

Web

Visit site Alternatives

Freedom report

Two barsScore 6.3

Free tierA free tier is on its own pricing page
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

Iron Bank Registry1 is ranked #14 of 56 in container registries on Freedom251. It runs on Web. There is a free plan.

Iron Bank Registry1 plans and pricing

All plans

Iron Bank Free No cost to contributors or users · Registry1 requires an account for image pulls docs-ironbank.dso.mil · 9 Oct 2026

Compared on container registries

Free plan: Yes
Image scanning: Yes
OCI artifacts: Yes
Maximum image size: 20 GB

Best Iron Bank Registry1 alternatives

See all 20

Two bars Docker Desktop Free tier No. 1$9/mo6.7 Two bars Inedo ProGet Free tier No. 2$199.58/mo6.6 Two bars JFrog Container Registry Free tier No. 3$50/mo6.6 One bar 8gears Container Registry Free tier No. 4Free6.5 One bar Chainguard Registry Free tier No. 5Free6.5 Two bars KakaoCloud Container Registry Free tier No. 6Free6.5

The record

Purpose: Iron Bank is a Platform One repository that provides hardened software container images and compliance and vulnerability assessments for the Department of Defense.
Registry: Registry1 is an OCI-compliant registry where users can download images using the command line.
Image access: Registry1 does not allow anonymous image pulls; users need a Repo1/Registry1 account.
Hardening pipeline: The Container Hardening Pipeline checks project requirements, builds hardened containers, scans them, and publishes findings to VAT and images to Registry1.
Security artifacts: Hosted containers can include Anchore, Twistlock, and OpenSCAP scan results, ClamAV virus scans, Trufflehog secrets scans, Syft SBOMs, Cosign signatures, and vendor finding justifications.
Refresh cadence: Iron Bank images are rebuilt every 24 hours with updated operating system packages.
Risk information: Iron Bank provides automated Acceptance Baseline Criteria compliance results and a numeric Overall Risk Assessment score for images.
Integrations: The documented ecosystem includes Repo1 Git repositories and CI pipelines, VAT for tracking vulnerability findings and justifications, and tools including Anchore, OpenSCAP, Twistlock, Cosign, and Renovate.
Supported users: Iron Bank is intended for DoD organizations consuming or contributing containers, authorization officials assessing application risks, and commercial vendors bringing applications to the DoD.
Publishing restriction: External container images cannot be uploaded directly to the registry; images must pass through the Iron Bank Container Hardening Pipeline.
Deployment limit: Iron Bank publishes container images but does not run or automatically deploy them in a user's environment.
Support: Users can request support by creating repository issues with the appropriate templates, attending Iron Bank weekly sessions, or contacting Iron Bank support directly.
Authorization limit: Hardened containers do not themselves have a Certificate to Field or an Authority to Operate.
Price from: Free

Where it ranks on Freedom251

Best Container Registries in 2026#14 of 56

Is Iron Bank Registry1 yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Iron Bank Registry1

Sources

docs-ironbank.dso.mil/faq/· checked 9 Oct 2026
docs-ironbank.dso.mil/quickstart/components/· checked 9 Oct 2026
docs-ironbank.dso.mil/quickstart/pipeline/· checked 9 Oct 2026
docs-ironbank.dso.mil/overview/· checked 9 Oct 2026