Freedom251 › Container Image Scanning Tools
Mirantis Secure Registry
What Mirantis Secure Registry is
Mirantis Secure Registry 4 is a paid, private enterprise container registry based on Harbor. It stores, shares, and manages images for cloud-native development, DevOps collaboration, controlled promotion, and distributed teams. MSR can run with applications on Kubernetes or deploy through Docker Compose or a Helm chart. Role-based access control works with OIDC, LDAP, or local accounts. Trivy scanning is enabled by default for pushed images, and Cosign signs images. Administrators can apply project- and repository-level quotas, immutable tags, and retention policies. Replication connects OCI-compatible registries such as Docker Hub, AWS ECR, Azure ACR, Google registries, GitLab, Quay, and JFrog Artifactory. MSR stores SPDX and CycloneDX SBOMs as OCI artifacts, integrates Velero for backup and restoration, and records detailed UI and API audit logs. Platforms include API, Linux, self-hosted, and web. Basic support starts at $9,999 a year per node; Enterprise starts at $14,999 a year per node.
Who it suits
MSR suits enterprise teams operating container supply chains, Kubernetes environments, controlled image promotion, and distributed development. It is also aimed at administrators needing scanning, identity controls, replication, quotas, SBOMs, backups, and audit records.
What it does well
- Trivy scanning enabled by default
- Cosign image signing
- OCI registry replication
- Stores SPDX and CycloneDX SBOMs
- Detailed audit logging
What to know first
- No free plan
- Basic support starts at $9,999 a year
- Enterprise support starts at $14,999 a year
- HA and multisite require contacting sales
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Enterprise 24X7 SUPPORT 1Y | Starting at $14,999.00 / 1 year per node · compatible Linux Server · individual single host · minimum 1 year · HA and multisite: contact sales | $14,999 a year |
| Basic 8X5 SUPPORT 1Y | Starting at $9,999.00 / 1 year per node · compatible Linux Server · individual single host · minimum 1 year · HA and multisite: contact sales | $9,999 a year |
As docs.mirantis.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
MSR 4 provides a broad private registry feature set for organizations managing secure image distribution and supply-chain controls. Its paid support plans and enterprise deployment focus make it a substantial infrastructure purchase.
Facts from Mirantis Secure Registry's own pages
- Access controls
- MSR supports role-based access control and OIDC, LDAP, or local account authentication. · docs.mirantis.com, 11 Oct 2026
- Audit logging
- MSR 4 captures detailed audit logs for UI and API actions, including user activity, system events, and administrative operations. · docs.mirantis.com, 11 Oct 2026
- Backup
- MSR 4 integrates Velero for backup and disaster recovery, including full or selective repository restoration. · docs.mirantis.com, 11 Oct 2026
- Deployment
- MSR 4 can run alongside applications on standard Kubernetes and can be deployed with Docker Compose or a Helm chart. · docs.mirantis.com, 11 Oct 2026
- Headquarters
- Campbell, California, United States · docs.mirantis.com, 28 Sept 2026
- Integrations
- The integration documentation lists Prometheus metrics, Trivy scanning by default, and identity providers such as AD/LDAP and OIDC. · docs.mirantis.com, 11 Oct 2026
- Intended users
- The product overview describes MSR as supporting cloud-native development, DevOps collaboration, controlled image promotion, and distributed teams. · docs.mirantis.com, 11 Oct 2026
- Purpose
- MSR 4 is a private enterprise container registry based on Harbor for storing, sharing, and managing images as part of a secure software supply chain. · docs.mirantis.com, 11 Oct 2026
- Quota limits
- MSR 4 introduces project- and repository-level quotas so administrators can set storage limits across teams. · docs.mirantis.com, 11 Oct 2026
- Replication
- MSR 4 supports replication to and from OCI-compatible registries, including Docker Hub, AWS ECR, Azure ACR, Google registries, GitLab, Quay, and JFrog Artifactory. · docs.mirantis.com, 11 Oct 2026
- SBOM
- MSR 4 supports storing and distributing SPDX and CycloneDX Software Bills of Materials as OCI artifacts. · docs.mirantis.com, 11 Oct 2026
- Scanning and signing
- The security documentation says Trivy vulnerability scanning is enabled by default for pushed images and Cosign is used to sign images. · docs.mirantis.com, 11 Oct 2026
- Security supply chain
- Mirantis says it hosts and maintains the MSR 4 Helm charts and images, scans and updates those resources on its corporate schedule, and checks sources for CVEs and malware injections. · docs.mirantis.com, 11 Oct 2026
- Support
- The webstore lists Basic support with 8×5 hours, maintenance updates, remote incident resolution, bulletins, and web and email access; Enterprise support adds 24×7 hours, enhanced SLAs, and phone access. · store.mirantis.com, 11 Oct 2026
Where Mirantis Secure Registry stands on Freedom251
- Container Image Scanning Tools#18 of 29
- Container Registries#43 of 60