Best Code Signing Software in 2026
Updated
Code signing software supports the process of verifying software releases and managing how signatures are applied. Compare CI/CD signing and cloud signing with HSM key protection, certificate provision, and approval workflows to assess how each option may fit your release process. Supported targets and trusted timestamping help frame compatibility, while free-plan availability and paid-from pricing offer cost context. SignPath, SignPath Foundation, and SignServer are among the options to consider, alongside AWS Signer and Sigstore. Focus on the listed capabilities that matter for your build and release environments, including where signing occurs and how signing decisions are controlled.
27ranked
8free plans on this page
$6.25/molowest paid tier
10 Oct 2026last checked
Code Signing Software, one module each.A lit port is something its maker publishes; 15 of 15 with a known API signal have a public API.
- 01 OpenPubkey API yesFREE yesDOCS 7.4Free
- 02 SignPath API yesFREE yesDOCS 7.3Free
- 03 SignPath Foundation API yesFREE yesDOCS 7.3Free
- 04 SignServer API yesFREE yesDOCS 7.3Free
- 05 AWS Signer API yesFREE yesDOCS 7.2Free
- 06 Sigstore API yesFREE yesDOCS 7.2Free
- 07 DigiCert Software Trust Manager API yesDOCS 7.0
- 08 SSL.com Certificate Lifecycle Management API yesDOCS 7.0
- 09 Bamboo Deploy API yesDOCS 6.9$15/mo
- 10 Code Signing Key Management Server (CSKMS) API yesDOCS 6.9
- 11 ComSignTrust Secure Code Signing Platform (ASCS) API yesDOCS 6.9
- 12 CyberArk Code Sign Manager - Self-Hosted API yesDOCS 6.9
- 13 Keyfactor Platform API yesDOCS 6.9
- 14 Signo API yesDOCS 6.9
- 15 LAAVAT PKI and Signing Platform API yesDOCS 6.7
- 16 Cosign FREE yesDOCS 6.0Free
- 17 Notation FREE yesDOCS 5.9Free
- 18 Aujas Automated Code Signing Platform DOCS 5.6
- 19 CodeLocker DOCS 5.6
- 20 The Update Framework DOCS 5.6
- 21 GaraTrust DOCS 5.5
- 22 PACE Code Signing Platform DOCS 5.5
- 23 Red Hat Trusted Artifact Signer DOCS 5.5
- 24 sslTrus Remote Code Signing Service FREE noDOCS 5.4$6.25/mo
- 25 GoGetSSL Cloud Code Signing FREE noDOCS 5.3$35.42/mo
Compare all 25 in a table
| # | Platform | Score | Free plan | Paid from | Supported targets | Certificate provided |
|---|---|---|---|---|---|---|
| 1 | OpenPubkey | 7.4 | Yes | messages and artifacts | No | |
| 2 | SignPath | 7.3 | Yes | Windows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifacts | Yes | |
| 3 | SignPath Foundation | 7.3 | Yes | Windows executables and scripts, MSI, CAB, AppX/MSIX, NuGet, Java archives, Android packages, RPM, Debian packages, Office macros, XML, JSON, OCI container images, ClickOnce, and arbitrary files | Yes | |
| 4 | SignServer | 7.3 | Yes | Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports | ||
| 5 | AWS Signer | 7.2 | AWS Lambda deployment packages; IoT and FreeRTOS firmware images; OCI container images | Yes | ||
| 6 | Sigstore | 7.2 | Yes | |||
| 7 | DigiCert Software Trust Manager | 7.0 | Windows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifacts | Yes | ||
| 8 | SSL.com Certificate Lifecycle Management | 7.0 | No | 129 /yr | Windows executables, drivers, installers, scripts, .exe, .dll, .msi, .cab, .sys, .ps1, Java code objects | Yes |
| 9 | Bamboo Deploy | 6.9 | Yes | EXE, MSI, DLL | Yes | |
| 10 | Code Signing Key Management Server (CSKMS) | 6.9 | firmware, software applications, software images, block images, hash fingerprints | |||
| 11 | ComSignTrust Secure Code Signing Platform (ASCS) | 6.9 | CAB, COS, EXE, DLL and other Microsoft Authenticode files | Yes | ||
| 12 | CyberArk Code Sign Manager - Self-Hosted | 6.9 | Code-signing keys and artifacts handled by integrated signing applications; specific target formats not confirmed | |||
| 13 | Keyfactor Platform | 6.9 | ||||
| 14 | Signo | 6.9 | Files; Windows executables via Authenticode | |||
| 15 | LAAVAT PKI and Signing Platform | 6.7 | No | NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signatures | Yes | |
| 16 | Cosign | 6.0 | Yes | OCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestations | Yes | |
| 17 | Notation | 5.9 | OCI container images and other OCI artifacts, including SBOMs | No | ||
| 18 | Aujas Automated Code Signing Platform | 5.6 | Windows files; Java JAR/WAR/EAR/HPI; Android APK; RPM; Linux files; Docker images; iOS/macOS DMG, IPA, PKG, APP; XAR; MAGE manifests; WHQL/HLK drivers; VSIX; DLL, EXE, JS, SYS, MSI, VBS, MSP, OCX, PS1, WSF, CAB; Debian packages; Helm charts | |||
| 19 | CodeLocker | 5.6 | source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts | |||
| 20 | The Update Framework | 5.6 | Yes | Software updates, repository target files, packages, and digital artifacts | ||
| 21 | GaraTrust | 5.5 | Windows Authenticode, Kernel/WHQL, MSI/MSIX, NuGet, PowerShell, ClickOnce, macOS, iOS, Android APK/AAB, Java JAR, Docker, Notary v2, Linux RPM, DEB, GPG, firmware/UEFI, PDF, XML/XAdES, SBOM | |||
| 22 | PACE Code Signing Platform | 5.5 | Windows, macOS, Linux, IoT binaries, AAX plug-ins | Yes | ||
| 23 | Red Hat Trusted Artifact Signer | 5.5 | container images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML models | Yes | ||
| 24 | sslTrus Remote Code Signing Service | 5.4 | No | 75 /yr | Adobe AIR applications, Firefox XPI extensions, macOS applications, Java JAR files, Microsoft Authenticode formats (.exe, .dll, .ocx, .msi, .cab and kernel drivers), Microsoft Office macro/VBA files, and Silverlight XAP files | Yes |
| 25 | GoGetSSL Cloud Code Signing | 5.3 | No | 425 /yr | Adobe AIR applications; Mozilla object files; Apple Mac software; Java JAR applets; Microsoft Authenticode files including DLL, OCX, EXE, MSI, CAB and kernel software; Microsoft Office VBA files; Microsoft Silverlight applications | Yes |
Is your platform on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93Reverse Engineering Tools 73Software Composition Analysis Software 66Artifact repository software 65Browser Automation Tools 63Integrated Development Environments 63Code Playground Software 58Continuous Integration Software 57Container Registries 56