Best Code Signing Software in 2026
Updated
In short: SignServer is ranked #1 of 26 as of 4 October 2026, ahead of SignPath and AWS Signer. The best-ranked option with a free plan is SignPath. The lowest first paid tier on this page is Bamboo Deploy at $15/mo.
Signing software supports the step between development and release, with differences in how keys are protected, approvals are handled and builds are signed. Compared on approval workflows, certificate provided, cloud signing, HSM key protection and CI/CD signing, these entries also specify supported targets and trusted timestamping. SignServer, SignPath and AWS Signer are among the options to weigh against your release process. Check whether the signing approach fits the environments your software must support, then consider free-plan availability and “Paid from” pricing. The listed criteria give you a basis for comparing signing capabilities and cost.
26 code signing software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
26ranked
6free plans on this page
$15/molowest paid tier
4 Oct 2026last checked
Input list Code Signing Software 25 channels on this page · 122 of 200 spec lines stated by the makers
Ch Tool Free planPaid fromSupported targetsCertificate providedCloud signingHSM key protectionTrusted timestampingCI/CD signing Spec sheet Score
01 SignServer Free planYesPaid fromnot statedSupported targetsWindows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassportsCertificate providednot statedCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 6/8spec lines stated 7.8
02 SignPath Free planYesPaid fromnot statedSupported targetsWindows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifactsCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 7/8spec lines stated 7.4
03 AWS Signer Free plannot statedPaid fromnot statedSupported targetsAWS Lambda deployment packages; IoT and FreeRTOS firmware images; OCI container imagesCertificate providedYesCloud signingYesHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingnot stated 3/8spec lines stated 7.3
04 Cosign Free planYesPaid fromnot statedSupported targetsOCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestationsCertificate providedYesCloud signingNoHSM key protectionYesTrusted timestampingYesCI/CD signingYes 7/8spec lines stated 7.3
05 DigiCert Software Trust Manager Free plannot statedPaid fromnot statedSupported targetsWindows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifactsCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 6/8spec lines stated 7.2
06 Sigstore Free planYesPaid fromnot statedSupported targetsnot statedCertificate providednot statedCloud signingnot statedHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingnot stated 1/8spec lines stated 7.1
07 Red Hat Trusted Artifact Signer Free plannot statedPaid fromnot statedSupported targetscontainer images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML modelsCertificate providedYesCloud signingnot statedHSM key protectionnot statedTrusted timestampingYesCI/CD signingYes 4/8spec lines stated 7.0
08 Keyfactor Platform Free plannot statedPaid fromnot statedSupported targetsnot statedCertificate providednot statedCloud signingnot statedHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingnot stated 0/8spec lines stated 6.9
09 SignPath Foundation Free planYesPaid fromnot statedSupported targetsWindows executables and scripts, MSI, CAB, AppX/MSIX, NuGet, Java archives, Android packages, RPM, Debian packages, Office macros, XML, JSON, OCI container images, ClickOnce, and arbitrary filesCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 7/8spec lines stated 6.9
10 Bamboo Deploy Free planYesPaid fromnot statedSupported targetsEXE, MSI, DLLCertificate providedYesCloud signingYesHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingYes 5/8spec lines stated 6.8
11 LAAVAT PKI and Signing Platform Free planNoPaid fromnot statedSupported targetsNXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signaturesCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 7/8spec lines stated 6.7
12 SSL.com Certificate Lifecycle Management Free planNoPaid from$129/yrSupported targetsWindows executables, drivers, installers, scripts, .exe, .dll, .msi, .cab, .sys, .ps1, Java code objectsCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 8/8spec lines stated 6.6
13 ComSignTrust Secure Code Signing Platform (ASCS) Free plannot statedPaid fromnot statedSupported targetsCAB, COS, EXE, DLL and other Microsoft Authenticode filesCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingYesCI/CD signingYes 6/8spec lines stated 6.5
14 GoGetSSL Cloud Code Signing Free planNoPaid from$425/yrSupported targetsAdobe AIR applications; Mozilla object files; Apple Mac software; Java JAR applets; Microsoft Authenticode files including DLL, OCX, EXE, MSI, CAB and kernel software; Microsoft Office VBA files; Microsoft Silverlight applicationsCertificate providedYesCloud signingYesHSM key protectionNoTrusted timestampingnot statedCI/CD signingYes 7/8spec lines stated 6.2
15 Code Signing Key Management Server (CSKMS) Free plannot statedPaid fromnot statedSupported targetsfirmware, software applications, software images, block images, hash fingerprintsCertificate providednot statedCloud signingnot statedHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 3/8spec lines stated 6.1
16 Notation Free plannot statedPaid fromnot statedSupported targetsOCI container images and other OCI artifacts, including SBOMsCertificate providedNoCloud signingYesHSM key protectionnot statedTrusted timestampingYesCI/CD signingYes 5/8spec lines stated 6.1
17 OpenPubkey Free planYesPaid fromnot statedSupported targetsmessages and artifactsCertificate providedNoCloud signingnot statedHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingnot stated 3/8spec lines stated 5.9
18 Signotaur Free planNoPaid fromnot statedSupported targetsWindows executables and installers, PowerShell scripts, AppX/MSIX, NuGet packages, VSIX packages, ClickOnce/VSTO manifests, RDP files, Apple configuration and provisioning profiles, CMS/PKCS#7 files, archives, PDF and XML documentsCertificate providedYesCloud signingNoHSM key protectionYesTrusted timestampingYesCI/CD signingYes 7/8spec lines stated 5.9
19 Aujas Automated Code Signing Platform Free plannot statedPaid fromnot statedSupported targetsWindows files; Java JAR/WAR/EAR/HPI; Android APK; RPM; Linux files; Docker images; iOS/macOS DMG, IPA, PKG, APP; XAR; MAGE manifests; WHQL/HLK drivers; VSIX; DLL, EXE, JS, SYS, MSI, VBS, MSP, OCX, PS1, WSF, CAB; Debian packages; Helm chartsCertificate providednot statedCloud signingYesHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 4/8spec lines stated 5.8
20 CyberArk Code Sign Manager - Self-Hosted Free plannot statedPaid fromnot statedSupported targetsCode-signing keys and artifacts handled by integrated signing applications; specific target formats not confirmedCertificate providednot statedCloud signingNoHSM key protectionYesTrusted timestampingnot statedCI/CD signingnot stated 3/8spec lines stated 5.7
21 GaraTrust Free plannot statedPaid fromnot statedSupported targetsWindows Authenticode, Kernel/WHQL, MSI/MSIX, NuGet, PowerShell, ClickOnce, macOS, iOS, Android APK/AAB, Java JAR, Docker, Notary v2, Linux RPM, DEB, GPG, firmware/UEFI, PDF, XML/XAdES, SBOMCertificate providednot statedCloud signingYesHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 4/8spec lines stated 5.7
22 PACE Code Signing Platform Free plannot statedPaid fromnot statedSupported targetsWindows, macOS, Linux, IoT binaries, AAX plug-insCertificate providedYesCloud signingYesHSM key protectionnot statedTrusted timestampingnot statedCI/CD signingYes 4/8spec lines stated 5.7
23 sslTrus Remote Code Signing Service Free planNoPaid from$75/yrSupported targetsAdobe AIR applications, Firefox XPI extensions, macOS applications, Java JAR files, Microsoft Authenticode formats (.exe, .dll, .ocx, .msi, .cab and kernel drivers), Microsoft Office macro/VBA files, and Silverlight XAP filesCertificate providedYesCloud signingYesHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 7/8spec lines stated 5.7
24 The Update Framework Free planYesPaid fromnot statedSupported targetsSoftware updates, repository target files, packages, and digital artifactsCertificate providednot statedCloud signingYesHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 5/8spec lines stated 5.7
25 CodeLocker Free plannot statedPaid fromnot statedSupported targetssource-code commits; source code; files; binaries; scripts; SBOMs; software artifactsCertificate providednot statedCloud signingnot statedHSM key protectionYesTrusted timestampingnot statedCI/CD signingYes 3/8spec lines stated 5.6
Is your tool on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which code signing software is ranked first on Specifiction?
SignServer is ranked #1 of 26 with a score of 7.8. SignPath is second and AWS Signer third.
How many of these have a free plan?
6 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Bamboo Deploy has the lowest first paid tier we found: $15/mo.
How is this list ranked?
Ranked on what each maker publishes, the fullest spec sheet first: how deeply the product is documented, the platforms it runs on, a free tier or trial to test it, and its standing. Paid placements never change a rank.
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Software Composition Analysis Software 65Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 56