Aujas Automated Code Signing Platform vs SignServer
Aujas Automated Code Signing Platform
aujas.com
SignServer
signserver.orgSide by side
| Figure | Aujas Automated Code Signing Platform | SignServer |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 2 |
| Spec score · Code Signing Software | 8.6 (#2) | 7.7 (#12) |
| Deployment | The datasheet lists on-premises deployment in a customer data center, public cloud, and managed cloud hosting. | Community can be downloaded as a Docker container, Helm chart, source code, or release from GitHub, and is also listed on SourceForge. |
| Integrations | The datasheet describes integration with corporate directories, SAML identity providers, command-line interfaces, and HSM key stores. | The comparison lists integration and secure automatic certificate renewal with CA/EJBCA, and the maker describes integration with third-party applications through standard interfaces. |
| Key protection | Signing keys are managed in an HSM or secure keystore, and access is allowed through CodeSign for approved requests from authorized users and machines. | The maker recommends storing signing keys in a Hardware Security Module; secure-file storage is described as suitable only for testing and prototyping. |
| Purpose | CodeSign is a secure, automated, DevOps-ready solution for ensuring software application integrity, protecting signing keys, and helping combat malware. | SignServer is a server-side platform for digitally signing code, documents, and timestamps. |
Plans
Aujas Automated Code Signing Platform
- Pay-as-use signing-based licensesPriced on request
In their own words
Aujas Automated Code Signing Platform
Aujas Automated Code Signing Platform, or CodeSign, manages signing requests across software build and release processes. It routes approvals for projects, builds, and certificates, and records approval and file-signing activity. Signing keys and certificates can be held in an HSM or secure keystore, with access limited to authorized users and machines for approved requests. The platform supports signing through command-line integration, including parallel submissions, and can be included in DevOps pipelines. Listed options include basic, GPG, hash, force, append, MAGE, and WHQL signing; a malware scanner can inspect files before signing. Certificate support includes self-signed, standard certificates from any CA, and Extended Validation certificates. Aujas lists more than 50 supported file types, with plugins to add types, and support for Windows, Linux, and macOS. Deployment choices include a customer data center, public cloud, and managed cloud hosting. CodeSign is paid, with pricing on request; Aujas offers a scheduled demo covering platform features, architecture, and application flow.
SignServer
SignServer is a server-side platform that centrally manages signing keys and digitally signs code, documents, and timestamps. One installation can serve several signing workflows, including containers, firmware, IoT, and DevOps use cases. It can connect to CI/CD pipelines, firmware build processes, document workflow engines, identity platforms, and other applications through standard interfaces. Community is available as a Docker container, Helm chart, source code, or GitHub release, and is also listed on SourceForge. Its interfaces include SOAP, HTTP, REST, and the SignClient command-line interface, though Community REST lacks some endpoints. Community is released under LGPL V2.1 or later and is intended for learning, testing, and prototyping rather than production. The maker says it lacks production capabilities such as audit, compliance, SLA, high availability, and security features. Enterprise adds professional support with an SLA, security updates, and maintenance. The Community plan is free; the Enterprise Cloud trial is free for 30 days through AWS or Azure marketplaces. The maker recommends Hardware Security Modules for signing-key storage.