FREEDOM251

Freedom251 › Developer Tools

Free and open first

Best Code Signing Software in 2026

Code signing software helps teams sign software releases and assess the controls around that process. Compare the certificate provided, cloud signing, and HSM key protection with approval workflows and CI/CD signing. Supported targets and trusted timestamping are useful criteria when considering release compatibility. AWS Signer, Cosign, and SignPath are among the options shown. The listed comparisons also include free-plan availability and paid-from pricing; weigh these against the signing capabilities and key protections relevant to your release setup.

  1. 1

    Sigstore

    Free plan Open source APILinuxMac+3

    Sigstore brings artifact signing, identity authentication and a public transparency log into one project. Cosign's stated integration caveats matter for teams considering it inside an application.

    8.6 Free plan Visit site
  2. 2

    AWS Signer

    Free plan APILinuxMac+2

    AWS Signer covers signing and verification workflows across Lambda, IoT, and container images. API quotas and possible related charges are worth accounting for when planning use.

    7.7 Visit site
  3. 3

    Bamboo Deploy

    Free plan APILinuxMac+2

    Bamboo Deploy combines binary scanning with signing and integrations for developer workflows. Signing is gated behind Premium, and new accounts should expect their sign requests to be reviewed.

    7.6 Free plan · paid from $15/mo Visit site
  4. 4

    Cosign

    Free plan LinuxMacSelf-hosted+1

    Cosign offers several signing approaches and supports a broad range of artifact workflows, including offline verification when the required materials are local.

    7.5 Free plan Visit site
  5. 5

    OpenPubkey

    Free plan APILinuxMac+2

    OpenPubkey links identity-provider-backed identities with signing keys without adding a certificate authority.

    7.2 Free plan Visit site
  6. 6

    Notation

    Free plan LinuxMacWindows

    Choose Notation if you need a free CLI for signing and verifying OCI artifacts across development or CI/CD workflows.

    7.1 Open source Visit site
  7. 7

    SignPath

    Free plan APILinuxMac+3

    SignPath ties artifact signing to build and release policies, with attestations, access controls, and audit logs. Its free plan is restricted to qualifying open source projects.

    7.1 Free plan Visit site
  8. 8

    SignServer

    Free plan APILinuxMac+3

    SignServer brings several digital-signing tasks and integrations into one server-side platform.

    7.0 Free plan · 30-day trial Visit site
  9. 9

    Signo

    Free plan APILinuxSelf-hosted

    Choose Signo if your Linux-based CI workflow needs API signing with certificates held on PKCS#11 tokens, along with controls for signees and signing engines.

    6.7 Open source Visit site
  10. 10

    SignPath Foundation

    Free plan APIWeb

    SignPath Foundation offers signing certificates for qualifying open-source projects, with build verification and protected keys.

    6.7 Free plan Visit site
  11. 11

    Aujas Automated Code Signing Platform

    Paid LinuxMacSelf-hosted+2

    CodeSign combines approval routing, key protection, audit records, and build-pipeline integration for software signing.

    6.1 Pricing on request Visit site
  12. 12

    Gitsign

    Free plan LinuxMacWindows
    6.1 Free plan Visit site
  13. 13

    Keyfactor Platform

    Free trial APISelf-hostedWeb

    Keyfactor Command combines certificate discovery, workflow automation, policy controls, and several deployment models.

    6.1 Pricing on request · 30-day trial Visit site
  14. 14

    LAAVAT PKI and Signing Platform

    Free trial APISelf-hostedWeb

    LAAVAT brings device PKI, firmware signing, key protection, and governance functions together for connected-device teams. Its maker cautions that platform use alone does not establish CRA compliance.

    6.0 Pricing on request · 14-day trial Visit site
  15. 15

    The Update Framework

    Free plan

    TUF adds metadata-based verification and signing controls to software update systems. Teams need to provide the update behavior and package formats that TUF itself does not define.

    6.0 Free plan Visit site
  16. 16

    DigiCert Software Trust Manager

    Paid APILinuxMac+2

    Software Trust Manager combines signing automation with access governance, audit logs, and protected key storage.

    5.8 Pricing on request · 30-day trial Visit site
  17. 17

    Signotaur

    Free trial Self-hostedWindows

    Signotaur centralizes certificate management and signing across Windows build workflows while keeping private keys on the server.

    5.7 From $199 · 14-day trial Visit site
  18. 18

    ComSignTrust Secure Code Signing Platform (ASCS)

    Paid APIWeb

    Choose ASCS if your organization needs controlled code signing with hardware-protected keys, configurable authentication, and request logs.

    5.6 Pricing on request Visit site
  19. 19

    CyberArk Code Sign Manager - Self-Hosted

    Paid APILinuxMac+3

    Code Sign Manager combines key-use controls, approvals, and auditing with client options for several operating systems.

    5.6 Pricing on request Visit site
  20. 20

    GoGetSSL Cloud Code Signing

    Paid MacWebWindows

    GoGetSSL Cloud Code Signing combines cloud certificate access with many listed signing tools, formats and workflow integrations.

    5.6 From $425/yr Visit site
  21. 21

    Red Hat Trusted Artifact Signer

    Paid LinuxMacSelf-hosted+2

    RHTAS provides signing and verification tools for software artifacts, with identity-based options and a transparency log.

    5.6 Pricing on request · 60-day trial Visit site
  22. 22

    Code Signing Key Management Server (CSKMS)

    Paid APISelf-hosted

    CSKMS combines protected key administration, multiple signature algorithms, and integration options for firmware and application signing.

    5.4 Pricing on request Visit site
  23. 23

    GaraTrust

    Paid Self-hosted

    GaraTrust combines broad artifact support with HSM-backed keys and controlled signing workflows.

    5.4 Pricing on request Visit site
  24. 24

    PACE Code Signing Platform

    Paid LinuxMacWindows

    Choose PACE Code Signing Platform if you publish an ecosystem that needs to verify third-party modules and manage developer signing.

    5.4 Pricing on request Visit site
  25. 25

    sslTrus Remote Code Signing Service

    Paid LinuxMacWeb+1

    sslTrus offers cloud-based signing with HSM-held keys, audit records, and compatibility across a broad range of formats and tools.

    5.3 From $75/yr Visit site

#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price

More in Developer Tools