Freedom251 › Artifact repository software

SecureStor

Paid Self-hostedWeb

What SecureStor is

SecureStor is an open-source artifact repository for web use and self-hosted deployment. It stores Docker, npm, Maven, PyPI, Helm, and generic artifacts, with compatibility for Docker Registry v2 and the npm registry. Automated scanning names OWASP dep-scan, Blint, Grype, and Trivy. Docker image pushes can generate CycloneDX SBOMs. Security controls include SSO, fine-grained RBAC, scoped API tokens, and OIDC or SAML integrations with Keycloak, Okta, Auth0, and Microsoft Entra ID. SecureStor supports active-active replication across regions and configurable synchronization. Storage can use local NVMe filesystems or cloud object storage such as AWS S3 and GCS. Listed compliance features include immutable audit trails, policy enforcement, license checks, and SOC 2 Type II compliance. Enterprise deployments cover Kubernetes with Helm, OpenShift, bare-metal Docker, and air-gapped environments.

Who it suits

It suits teams managing multiple artifact formats that need self-hosting, access controls, scanning, and retention rules. Enterprise users can use its listed replication and deployment options.

What it does well

Open-source artifact repository
Supports six named package formats plus generic artifacts
Automated vulnerability scanning tools
Fine-grained access controls and identity integrations
Multi-region active-active replication

What to know first

Advanced deployment options are under Enterprise
Self-hosted operation requires infrastructure
Cloud storage options are listed, not included pricing

Plans

Plan	Billed and limits	Price
Community Edition	Open source · Multi-format artifact management · Automated security scanning · Proxy caching · Audit logging · REST API	On request
Enterprise plan	Self-hosted option · Multi-region replication · Dedicated support	On request

As securestor.io lists them, read 11 Oct 2026. The maker's own page has the final word.

Verdict

SecureStor combines artifact storage with scanning, identity controls, replication, and compliance features. Its self-hosted and enterprise deployment choices suit organizations managing their own infrastructure.

Facts from SecureStor's own pages

Access controls: The site lists SSO, fine-grained RBAC, API token scoping, and OIDC/SAML identity integrations. · securestor.io, 11 Oct 2026
Compliance: The site claims SOC 2 Type II compliance and describes immutable audit trails, policy enforcement, and license checks. · securestor.io, 11 Oct 2026
Deployment: The Enterprise plan offers self-hosted deployments for Kubernetes with Helm charts, OpenShift, and bare-metal Docker, including air-gapped environments. · securestor.io, 11 Oct 2026
Identity integrations: It names Keycloak, Okta, Auth0, and Microsoft Entra ID as identity provider integrations. · securestor.io, 11 Oct 2026
Package formats: It supports Docker, npm, Maven, PyPI, Helm, and generic artifacts. · securestor.io, 11 Oct 2026
Product: SecureStor describes itself as an artifact repository that combines storage with automated security scanning and compliance management. · securestor.io, 11 Oct 2026
Registry compatibility: The site says it is compatible with Docker Registry v2 and the npm registry. · securestor.io, 11 Oct 2026
Replication: SecureStor describes active-active replication across regions with configurable synchronization. · securestor.io, 11 Oct 2026
SBOMs: SecureStor says it automatically generates CycloneDX SBOMs for Docker image pushes. · securestor.io, 11 Oct 2026
Storage backends: The site lists local NVMe filesystem and cloud object storage including AWS S3 and GCS. · securestor.io, 11 Oct 2026
Support: SecureStor says enterprise clients can get dedicated support and its engineering team can assist with migration. · securestor.io, 11 Oct 2026
Vulnerability scanning: The site names OWASP dep-scan, Blint, Grype, and Trivy for artifact scanning. · securestor.io, 11 Oct 2026

Where SecureStor stands on Freedom251

Artifact repository software#60 of 64