Deploy containers on hardened, minimal VM images — rebuilt from source daily to ensure zero known CVEs — optimized for ephemeral workloads across cloud and on-premise environments.
The security and innovation-friendly container host has arrived
Meet critical compliance controls by default with zero-CVE Container Hosts, Application, and Base images guarded under a CVE remediation SLA.
Focus on differentiated product experiences and reduce the burden on engineering and security teams for CVE triage, management, and remediation.
Benefit from the latest features, security updates, and performance optimizations from upstream maintainers without costly and complex major upgrades.
Shrink your attack surface without compromising performance with VMs that include only components required to run your containerized applications and support ephemeral cloud-native workloads.
Benefit from newly available features, software upgrades, and a best-in-class CVE remediation SLA of 7 days for critical and 14 days for high, medium, and low through automated rebuilds.
Build on Chainguard VMs optimized for one-click deployments into the cloud of your choice or on-premise environment, with end-to-end integrity for every software component included in your virtual machines.
Customize Chainguard VMs to meet organization-specific requirements for your container hosts without spawning additional overhead and maintenance requirements.
The Chainguard VMs difference
Know exactly what’s in your open source with full provenance and open attestations.
We don’t just identify OSS vulnerabilities for you to manage – we remove them entirely.
One reliable, secure partner with industry-leading SLAs to take on the burden of a hard, unpredictable problem.
The leading open source minds driving the industry forward, delivering new innovations for our users.
Minimal, zero-CVE container images with a best-in-class SLA for CVE remediation.
Learn more
A guarded catalog of language libraries that protect against supply chain attacks.
Learn more
Chainguard VMs is a catalog of guarded, minimal, zero-CVE container host images that is now in Early Access.
Chainguard OS is the next generation in open source software delivery. Learn all about the principles and technology that make it possible.
The traditional "distro" model of open source software delivery is ready for innovation. Learn how we got to this point and what comes next.
The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next.
Get info on our customized pricing plans or request a demo tailored to your team's workflows.