Skip to content
SPECIFICTION
Get listed

Determinate Systems

determinate.systems

WebWindowsmacOSLinux
Visit determinate.systems
Spec score 7.8 #14 of 24 in Software Supply Chain Security Software

What it is

Determinate Systems provides an end-to-end Nix toolchain for installation, collaboration, and deployment across developer laptops, CI, cloud, and edge devices. The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. Determinate Nix adds lazy trees, parallel evaluation, stable flakes by default, and a native Linux builder for macOS. FlakeHub offers binary caching, private flakes, organization controls, semantic versioning, and deployment of NixOS, Home Manager, and nix-darwin configurations without local evaluation. Secure Packages is a supported Nixpkgs replacement with curated packages and cryptographic signing. It includes CycloneDX 1.5 SBOM generation, policy checks, and vulnerability scanning; critical vulnerabilities are said to be patched within seven days. Distributions receive at least 12 months of support, with one in four receiving 60 months. Platforms listed are Linux, macOS, Windows, and web. A free plan is available.

Spec sheet

What it does
Determinate is a platform for using Nix across developer laptops, CI, cloud infrastructure, and edge devices.Read 30 Sep 2026 · determinate.systems
Product
Determinate is an end-to-end Nix toolchain spanning installation, collaboration, and deployment.Read 30 Sep 2026 · docs.determinate.systems
Integrations
FlakeHub documents authentication with GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud, and identity-provider support for GitHub, Microsoft Entra, and Okta.Read 30 Sep 2026 · determinate.systems
Compliance
The maker says FlakeHub is FedRAMP High authorized and its package builds use SOC 2 Type II infrastructure.Read 30 Sep 2026 · determinate.systems
Headquarters
Pittsfield, Massachusetts, United StatesRead 28 Sep 2026 · determinate.systems
Authentication integrations
FlakeHub supports authentication with GitHub, Microsoft Entra, and Okta, and accepts JWTs from GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud.Read 30 Sep 2026 · determinate.systems
Company origin
Determinate Systems was founded by Eelco Dolstra, creator of Nix, and Graham Christensen, a long-time Nix community leader and systems engineer.Read 30 Sep 2026 · determinate.systems
Configuration deployment
FlakeHub's fh apply can deploy NixOS, Home Manager, and nix-darwin configurations without local Nix evaluation.Read 30 Sep 2026 · determinate.systems
Core products
The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages.Read 30 Sep 2026 · determinate.systems
CVE remediation
The Secure Packages page says critical vulnerabilities are patched within 7 days of disclosure.Read 30 Sep 2026 · determinate.systems
Determinate Nix
Determinate Nix is a validated distribution of Nix with parallel evaluation, lazy trees, stable flakes enabled by default, and a native Linux builder for macOS.Read 30 Sep 2026 · determinate.systems
Enterprise support
Enterprise Nix Support includes a dedicated Slack channel, critical-issue investigation within one business hour, and a fix or mitigation target within five business days.Read 30 Sep 2026 · determinate.systems
FlakeHub
FlakeHub provides binary caching, private flakes, organization access controls, and semantic versioning for Nix flakes.Read 30 Sep 2026 · determinate.systems
Intended customers
The company describes Determinate as Nix for work and organizations with demanding security requirements, while also providing an individual getting-started guide.Read 30 Sep 2026 · docs.determinate.systems
Nix distribution
Determinate Nix is a validated downstream distribution with lazy trees, parallel evaluation, stable flakes enabled by default, and a native Linux builder for macOS.Read 30 Sep 2026 · determinate.systems
Package support
Each distribution is supported for at least 12 months, and one in four is an LTS distribution with 60 months of support.Read 30 Sep 2026 · determinate.systems
Package support limits
Each versioned distribution is supported for at least 12 months, and one in every four distributions is an LTS distribution with 60 months of support.Read 30 Sep 2026 · determinate.systems
Platform components
The Determinate platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages.Read 30 Sep 2026 · determinate.systems
Platform support
Determinate is available for macOS, most Linux systems, and Windows Subsystem for Linux; the maker also documents NixOS installation.Read 30 Sep 2026 · docs.determinate.systems
Secure packages
Determinate Secure Packages is a commercially supported drop-in replacement for Nixpkgs with a curated package set and cryptographic signing.Read 30 Sep 2026 · determinate.systems
Security and compliance
The maker says its infrastructure is SOC 2 Type II compliant and FlakeHub is FedRAMP High authorized.Read 30 Sep 2026 · determinate.systems
Supply-chain tools
Secure Packages includes access to FlakeBOM for CycloneDX 1.5 SBOM generation and FlakeAudit for policy checks and vulnerability scanning.Read 30 Sep 2026 · determinate.systems
Support limit
Custom development may be available through Enterprise Nix Support but is not included.Read 30 Sep 2026 · determinate.systems
Use cases
The platform is designed for coding agents, developer laptops, CI, cloud, and edge devices.Read 30 Sep 2026 · determinate.systems
Who it serves
The maker describes the platform as designed for engineering teams and organizations with demanding security requirements, from startups to large enterprises.Read 30 Sep 2026 · docs.determinate.systems

Strong points and limits

Strong points

  • End-to-end Nix tooling for laptops, CI, cloud, and edge
  • Private flakes and organization access controls
  • SBOM generation and vulnerability scanning
  • Cryptographic package signing
  • Supports Linux, macOS, Windows, and web

Limits

  • Custom development is not included in enterprise support
  • Some platform capabilities depend on Nix components
  • Support periods vary by distribution

Who it suits

Determinate targets engineering teams and organizations with demanding security requirements, from startups to enterprises. Individual users also have a getting-started guide.

Verdict

Determinate Systems brings Nix distribution, collaboration, package security, and deployment together. Its free plan and broad platform coverage are paired with documented support periods and enterprise security offerings.

Where Specifiction places it

Alternatives to Determinate SystemsAll alternatives →