Aujas Automated Code Signing Platform vs GaraTrust
Aujas Automated Code Signing Platform
aujas.comGaraTrust
garantir.ioSide by side
| Figure | Aujas Automated Code Signing Platform | GaraTrust |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Code Signing Software | 8.6 (#2) | 7.1 (#23) |
| Deployment | The datasheet lists on-premises deployment in a customer data center, public cloud, and managed cloud hosting. | GaraTrust is available as SaaS or on-premises and supports air-gapped and classified environments. |
| Key protection | Signing keys are managed in an HSM or secure keystore, and access is allowed through CodeSign for approved requests from authorized users and machines. | Signing keys are stored as non-exportable in FIPS 140-2/3 HSMs and do not leave the hardware. |
| Malware scanning | The leaflet describes an enterprise-grade malware scanner that inspects files before signing. | Before approving a signature, GaraTrust can run configured static analysis, fuzzing, and malware-scanning tools on source code or binaries. |
| Signing workflow | The platform uses role-based approvals and workflows to control signing requests and integrate signing into build and release processes. | The signing client hashes binaries locally and sends only the hash for signing, which the page says completes in milliseconds. |
Plans
Aujas Automated Code Signing Platform
- Pay-as-use signing-based licensesPriced on request
In their own words
Aujas Automated Code Signing Platform
Aujas Automated Code Signing Platform, or CodeSign, manages signing requests across software build and release processes. It routes approvals for projects, builds, and certificates, and records approval and file-signing activity. Signing keys and certificates can be held in an HSM or secure keystore, with access limited to authorized users and machines for approved requests. The platform supports signing through command-line integration, including parallel submissions, and can be included in DevOps pipelines. Listed options include basic, GPG, hash, force, append, MAGE, and WHQL signing; a malware scanner can inspect files before signing. Certificate support includes self-signed, standard certificates from any CA, and Extended Validation certificates. Aujas lists more than 50 supported file types, with plugins to add types, and support for Windows, Linux, and macOS. Deployment choices include a customer data center, public cloud, and managed cloud hosting. CodeSign is paid, with pricing on request; Aujas offers a scheduled demo covering platform features, architecture, and application flow.