Side by side
Red Hat Trusted Artifact Signer vs Signotaur
Both stand on code signing software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Paid LinuxMacSelf-hosted+2
RHTAS provides signing and verification tools for software artifacts, with identity-based options and a transparency log. Buyers should review deployment prerequisites and note that AI/ML model signing through the CLI is a Technology Preview, not covered by production SLAs.
Visit Red Hat Trusted Artifact Signer Free trial Self-hostedWindows
Signotaur centralizes certificate management and signing across Windows build workflows while keeping private keys on the server. Its perpetual licenses include a year of support and updates, with a 14-day trial available.
Visit SignotaurThe facts
| Red Hat Trusted Artifact Signer | Signotaur | |
|---|---|---|
| Free plan | Not published | A free trial |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Self-hosted, Web, Windows | Self-hosted, Windows |
| Lowest paid plan | Free or on request | Signotaur Standard Server: $199, paid once |
| Plans published | 1 | 2 |
| Maker | Not published | Not published |
| Website | access.redhat.com | finalbuilder.com |
| On code signing software | #21 of 28 | #17 of 28 |
Red Hat Trusted Artifact Signer: what it does well
- Client tools include cosign, gitsign and rekor-cli.
- Supports identity-based signing through OpenID Connect.
- Signing events enter a permanent, immutable ledger.
- A 60-day trial is listed.
What to know first
- Pricing is on request.
- OpenShift deployment requires version 4.16 or later.
- AI/ML model CLI signing is Technology Preview.
- Technology Preview features are not covered by production SLAs.
Signotaur: what it does well
- Private keys remain on the server
- Supports hardware certificate devices
- API-key client authentication
- CI/CD signing support
- Unlimited users and signings
What to know first
- Windows server required
- HTTPS and SSL certificate required
- Cloud signing is unavailable
- Signing requires a license key
Alternatives to Red Hat Trusted Artifact Signer Alternatives to Signotaur The whole list