Aujas Automated Code Signing Platform vs Red Hat Trusted Artifact Signer
Aujas Automated Code Signing Platform
aujas.comRed Hat Trusted Artifact Signer
access.redhat.comSide by side
| Figure | Aujas Automated Code Signing Platform | Red Hat Trusted Artifact Signer |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Code Signing Software | 8.6 (#2) | 7.5 (#18) |
| Integrations | The datasheet describes integration with corporate directories, SAML identity providers, command-line interfaces, and HSM key stores. | Red Hat lists Podman, Quay, Ansible, Red Hat Advanced Cluster Security, StoneSoup/HACBS, and Red Hat Trusted Content among products adopting or integrating Sigstore. |
| Purpose | CodeSign is a secure, automated, DevOps-ready solution for ensuring software application integrity, protecting signing keys, and helping combat malware. | RHTAS simplifies cryptographic signing and verification of software artifacts, including container images, binaries, and Git commits. |
Plans
Aujas Automated Code Signing Platform
- Pay-as-use signing-based licensesPriced on request
Red Hat Trusted Artifact Signer
- Red Hat Trusted Artifact SignerPriced on request
In their own words
Aujas Automated Code Signing Platform
Aujas Automated Code Signing Platform, or CodeSign, manages signing requests across software build and release processes. It routes approvals for projects, builds, and certificates, and records approval and file-signing activity. Signing keys and certificates can be held in an HSM or secure keystore, with access limited to authorized users and machines for approved requests. The platform supports signing through command-line integration, including parallel submissions, and can be included in DevOps pipelines. Listed options include basic, GPG, hash, force, append, MAGE, and WHQL signing; a malware scanner can inspect files before signing. Certificate support includes self-signed, standard certificates from any CA, and Extended Validation certificates. Aujas lists more than 50 supported file types, with plugins to add types, and support for Windows, Linux, and macOS. Deployment choices include a customer data center, public cloud, and managed cloud hosting. CodeSign is paid, with pricing on request; Aujas offers a scheduled demo covering platform features, architecture, and application flow.
Red Hat Trusted Artifact Signer
Red Hat Trusted Artifact Signer (RHTAS) helps organizations sign and verify software artifacts, including container images, binaries, documents, source-code commits, software bills of materials, build artifacts, and AI/ML models. Red Hat describes it as an enterprise deployment of Sigstore. Its client tools include cosign, gitsign, and rekor-cli. Signing can use OpenID Connect identities or self-managed keys held in a third-party key management system. A certificate transparency log records signing events in an immutable ledger that Red Hat says is inaccessible to the public. Deployment guidance covers Red Hat OpenShift Container Platform and Red Hat Enterprise Linux; Amazon EKS is listed as a development preview for RHTAS 1.4. The OpenShift guide requires version 4.16 or later, cluster-admin access, an OIDC provider, and the oc command-line tool. CLI binaries are listed for Windows, macOS, and Linux. Pricing is on request, and a 60-day trial is listed. Signing and verifying AI/ML models with the CLI is marked Technology Preview and is not covered by production SLAs.