Skip to content
SPECIFICTION
Get listed

Chainguard Registry

images.chainguard.dev

Free plan WebLinuxSelf-hosted
Visit images.chainguard.dev
Spec score 8.3 #7 of 60 in Container Registries

What it is

Chainguard Registry provides Chainguard Containers: minimal container images rebuilt from source daily. Its directory lists 3,115 projects and 735,898 images. Chainguard says images are continuously built in SLSA L3 hardened infrastructure with CVE patching, and lists Sigstore-signed artifacts with build-time SBOMs and digital attestations. The free offer allows up to five images per organization; the FAQ describes a freely available set of about 50 images, limited to:latest tags and without a CVE remediation SLA. Catalog plans include upstream-supported major and minor tags, contractual remediation timelines of seven days for critical vulnerabilities and 14 days for other listed severity levels, and requests for new images. Catalog features also include automated Custom Assembly tooling, a private APK repository with more than 10,000 packages, and STIG-hardened and FIPS-validated images. Images can be pulled from Chainguard or mirrored to listed artifact managers. Chainguard lists compatibility with multiple scanners. Free Images costs nothing; Catalog is priced on request. The product runs on Linux, self-hosted, and web environments.

Spec sheet

Product
Chainguard Containers provides minimal, hardened container images rebuilt from source daily.Read 3 Oct 2026 · images.chainguard.dev
Intended users
Chainguard describes the product as a foundation for engineers and says the catalog licensing model is suited to organizations relying heavily on Chainguard Containers.Read 3 Oct 2026 · chainguard.dev
Support
The site directs prospective customers to contact Chainguard for an enterprise quote and links to a support portal.Read 3 Oct 2026 · chainguard.dev
Headquarters
Seattle, Washington, United StatesRead 28 Sep 2026 · images.chainguard.dev
Founded
2021Read 28 Sep 2026 · images.chainguard.dev
Maker
The maker identifies itself as Chainguard, Inc.Read 3 Oct 2026 · images.chainguard.dev
Artifact evidence
The pricing page lists Sigstore-signed artifacts with build-time SBOMs and digital attestations.Read 3 Oct 2026 · chainguard.dev
Artifact managers
The pricing FAQ says customers can pull from Chainguard's registry or mirror images to JFrog Artifactory, Cloudsmith, Harbor, Nexus, Google Artifact Registry, Docker Hub, Amazon ECR, and Microsoft ACR.Read 3 Oct 2026 · chainguard.dev
Build security
The pricing page says container images are continuously built from source in SLSA L3 hardened infrastructure with CVE patching.Read 3 Oct 2026 · chainguard.dev
Catalog size
The image directory lists 3,115 projects and 735,898 images.Read 3 Oct 2026 · images.chainguard.dev
Compliance images
The pricing page lists access to STIG-hardened and FIPS-validated images as a feature.Read 3 Oct 2026 · chainguard.dev
Customization
Catalog plans include automated Custom Assembly tooling and access to a private APK repository with more than 10,000 packages for image customization.Read 3 Oct 2026 · chainguard.dev
Free access
The pricing page offers five images to test and deploy in production for free, with up to five images per organization.Read 3 Oct 2026 · chainguard.dev
Free image limit
The FAQ says the freely available image set has about 50 images, includes only :latest tags, and is not covered by the CVE remediation SLA.Read 3 Oct 2026 · chainguard.dev
Remediation SLA
The listed contractual CVE SLA is seven days for critical vulnerabilities and 14 days for high, medium, and low vulnerabilities.Read 3 Oct 2026 · chainguard.dev
Scanner integrations
Chainguard lists compatibility with scanners including Anchore, Aqua Trivy, AWS, CrowdStrike, GitLab, Grype, Qualys, Snyk, and Wiz.Read 3 Oct 2026 · chainguard.dev
Supported versions
The pricing page lists upstream supported versions, including major and minor tags, and says EOL versions and EmeritOSS images are excluded.Read 3 Oct 2026 · chainguard.dev

Plans and prices

Free Images Free Up to five images per organization · Base, Application, and AI/ML images · no CVE remediation SLA stated for the free image set Read 3 Oct 2026 · chainguard.dev
Catalog Priced on request Request Enterprise pricing Licensed by engineering organization size · full catalog access to 3,000+ images · contractual CVE SLA · net new image requests Read 3 Oct 2026 · chainguard.dev
Per Image Priced on request Request Enterprise pricing Licensed by number and type of images · contractual CVE SLA · all upstream supported tags Read 3 Oct 2026 · chainguard.dev

Every Chainguard Registry plan and price →

Strong points and limits

Strong points

  • Images are rebuilt from source daily.
  • Free plan permits up to five images per organization.
  • Catalog lists a contractual CVE remediation SLA.
  • Custom Assembly tooling supports image customization.
  • Images can be mirrored to listed artifact managers.

Limits

  • Free images include only:latest tags.
  • The free image set has no CVE remediation SLA.
  • Catalog pricing is priced on request.
  • Immutable tags are not supported.

Who it suits

Chainguard describes the images as a foundation for engineers. Its catalog licensing model is suited to organizations that rely heavily on Chainguard Containers.

Verdict

Chainguard Registry specifies image build practices, artifact evidence, catalog scope, and remediation terms. The free option is limited, while catalog pricing and access are oriented toward organizations seeking broader coverage.

Where Specifiction places it

Alternatives to Chainguard RegistryAll alternatives →