ZenoRegistry

Spec sheet

Purpose

ZenoRegistry is a self-hosted, OCI-compliant container registry for internal enterprise use.Read 4 Oct 2026 · citiumsoftware.com

Intended users

The maker describes it for internal platform teams, sovereign or air-gapped deployments, GitOps, Cosign supply-chain workflows, and organizations seeking a self-hosted alternative to SaaS registries.Read 4 Oct 2026 · citiumsoftware.com

Deployment

The server, OCI API, admin REST API, and embedded admin UI ship in one Go binary; PostgreSQL and S3-compatible object storage are its runtime dependencies.Read 4 Oct 2026 · citiumsoftware.com

Integrations

The page says Argo CD and Flux can pull from ZenoRegistry and that it ships as a core service in the ZenoKube sovereign cloud platform.Read 4 Oct 2026 · citiumsoftware.com

Support

The maker invites customers to contact it for a demo, managed deployment, or self-hosted licence; its contact page says inquiries receive a response within 24 hours on business days.Read 4 Oct 2026 · citiumsoftware.com

Headquarters

Denmark, European UnionRead 28 Sep 2026 · citiumsoftware.com

Access control

It provides pull, push, and admin roles, with JWT scopes checked per repository and action on OCI requests.Read 4 Oct 2026 · citiumsoftware.com

Company location

Citium Software describes its European roots as being in Denmark, and its contact page lists Denmark, European Union.Read 4 Oct 2026 · citiumsoftware.com

Identity integrations

Admin dashboard SSO supports OIDC providers including Keycloak, Entra ID, Google Workspace, Authentik, Okta, and Dex; local admin is available as an emergency option.Read 4 Oct 2026 · citiumsoftware.com

Image retention

Retention policies can keep a specified number of recent tags or tags within a specified age, protect glob patterns, and enforce a per-repository safety floor; dry-run previews are available.Read 4 Oct 2026 · citiumsoftware.com

OCI support

It implements OCI push, pull, tag listing, catalog, chunked uploads, cross-repository blob mounts, and manifest deletion, and the page names Docker, Podman, and nerdctl as compatible clients.Read 4 Oct 2026 · citiumsoftware.com

Operations

It includes a dependency-free health endpoint, graceful shutdown, structured JSON logs, automatic PostgreSQL migrations, and Kubernetes deployment guidance.Read 4 Oct 2026 · citiumsoftware.com

Security controls

The page describes bearer JWTs, HTTP-only SameSite=Lax admin session cookies, bcrypt password hashing, configurable token lifetime, native TLS, and OIDC login.Read 4 Oct 2026 · citiumsoftware.com

Storage integrations

Its S3-compatible storage driver works with AWS S3, MinIO, Ceph, DigitalOcean Spaces, Scaleway Object Storage, and other S3-compatible services.Read 4 Oct 2026 · citiumsoftware.com

Supply chain

The registry recognizes Cosign signatures, attestations, SBOM sibling tags, and multi-architecture references, and excludes signatures and SBOMs from retention deletion.Read 4 Oct 2026 · citiumsoftware.com

Plans and prices

Every ZenoRegistry plan and price →

Where Specifiction places it

• Container Registries#46 of 606.8