CodeLocker

Spec sheet

Purpose

CodeLocker is a code-signing platform for software supply-chain traceability and provenance.Read 10 Oct 2026 · codelocker.zevainc.com

Product

CodeLocker is a code signing platform for software supply chain traceability and provenance.Read 9 Oct 2026 · codelocker.zevainc.com

Intended users

The maker describes it as designed for software developers and deployment engineers in regulated critical infrastructure sectors, including defense, healthcare, device manufacturing, and finance.Read 9 Oct 2026 · codelocker.zevainc.com

Integrations

It integrates with source-code repositories and CI/CD build servers, and offers customizable plug-ins for third-party applications.Read 10 Oct 2026 · codelocker.zevainc.com

Compliance

The maker says CodeLocker helps developers comply with the NIST Secure Software Development Framework (NIST 800-218).Read 10 Oct 2026 · codelocker.zevainc.com

Headquarters

Fairfax, Virginia, USARead 28 Sep 2026 · codelocker.zevainc.com

Founded

2005Read 28 Sep 2026 · codelocker.zevainc.com

Maker

Zeva says it was founded in 2005 in Virginia, USA, and lists its address as 10300 Eaton Place Suite 305, Fairfax, VA 22030, USA.Read 10 Oct 2026 · zevainc.com

Access controls

Its zero trust architecture calls for identity verification and least privileged access, and the platform supports multifactor authentication.Read 9 Oct 2026 · codelocker.zevainc.com

Audit trail

It supports multifactor authentication and signed source-code verification with a step-by-step audit trail.Read 10 Oct 2026 · codelocker.zevainc.com

Build pipeline

It can integrate with a DevOps build pipeline to sign binaries produced by a build.Read 9 Oct 2026 · codelocker.zevainc.com

Identity and access

Its zero-trust approach includes explicit identity verification and least-privileged access.Read 10 Oct 2026 · codelocker.zevainc.com

Key security

The site says private keys remain in an HSM and describes centralized key management compatible with FIPS 140-3 Level 3 HSMs.Read 10 Oct 2026 · codelocker.zevainc.com

Long-term validation

Its long-term validation signatures include data needed to validate signatures in environments with limited or no internet access, including air-gapped environments.Read 10 Oct 2026 · codelocker.zevainc.com

Maker background

Zeva says it was founded in 2005 in Herndon, Virginia, USA.Read 9 Oct 2026 · zevainc.com

Sales and support

The site invites prospective customers to book a demo and does not list a self-serve purchase price.Read 10 Oct 2026 · codelocker.zevainc.com

Signing

It supports both commit-level and binary-level signing.Read 10 Oct 2026 · codelocker.zevainc.com

Target users

The maker describes it as designed for software developers and deployment engineers in regulated critical-infrastructure sectors, including defense, healthcare, device manufacturing, and finance.Read 10 Oct 2026 · codelocker.zevainc.com

Validation

It provides an automated validation workflow for code signing.Read 10 Oct 2026 · codelocker.zevainc.com

Where Specifiction places it

• Code Signing Software#22 of 287.1