Sold by: Chainguard
Deployed on AWS
Chainguard Images are a collection of minimal, hardened container images that are patched and rebuilt daily, and come with low-to-zero known CVEs, SLSA 2 compliance, signatures, and SBOMs.
4.7
Overview
Chainguard Images are a collection of minimal, hardened container images. They only contain what is required to build or run your application, delivering on average a 97.6% reduction in CVEs. Each Chainguard Image is patched and rebuilt daily from source with the latest security fixes and CVE remediations, resulting in low-to-zero known CVEs, verifiable image signatures and attestations, high-quality SBOMs, and SLSA Level 2 - Build compliance.
The Chainguard Images inventory contains images for the most popular base images, including Go, Python, Ruby, PHP, Node, and more; and a selection of common developer tools, applications, data products, and servers.
Chainguard Production Images are available for FIPS compliance, major and minor versions, enterprise SLAs, and customer support. Chainguard offers custom pricing through AWS Marketplace Private Offers.
Chainguard provides custom pricing for customers via Private Offer. Please contact AWS-marketplace@chainguard.dev for more information on our pricing model. Pricing displayed is per Image.
Highlights
- Low-to-zero known CVEs with daily patches and rebuilds
- Full SLSA Build Level 2 provenance, signatures, and SBOMs
- Images with FIPS validation available upon request
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Custom pricing options
Pricing is based on your specific requirements and eligibility. Sign in to view any offers that have been extended to you.
Legal
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Chainguard Images are a collection of minimal, hardened container images that are patched and rebuilt daily, and come with low-to-zero known CVEs, SLSA 2 compliance, signatures, and SBOMs.
Deploy your containerized workloads in a threat-resistant environment by leveraging Chainguard container hosts, backed by our CVE remediation SLA, helping you eliminate developer toil and enabling your team to focus on innovation instead of patching vulnerabilities. These minimal, low-to-zero-CVE container hosts are built entirely from source in Chainguard's SLSA Level 2 infrastructure. These container hosts include only those components required to run as a container host, along with an optimized kernel.
Deploy your containerized workloads in a threat-resistant environment by leveraging Chainguard container hosts, backed by our CVE remediation SLA, helping you eliminate developer toil and enabling your team to focus on innovation instead of patching vulnerabilities. These minimal, low-to-zero-CVE container hosts are built entirely from source in Chainguard's SLSA Level 2 infrastructure. These container hosts include only those components required to run as a container host, along with an optimized kernel.
FIPS 140-3 validated, minimal-CVE drop-in replacement for kube-proxy on your EKS cluster to route Service traffic to pods while meeting federal compliance and STIG-hardening requirements out of the box.
Customer reviews
Rahul J.
Secure, Lightweight Prebuilt Images Across Databases and Languages
Reviewed on Oct 02, 2026
Review provided by G2
What do you like best about the product?
Secure based container image, interestingly it has vast variety of the pre-built images from database like Postgres, MySQL to language like Java, Go, Python and Node. Images are very small, also difference between dev image for building and image to run in production very secure.
What do you dislike about the product?
Sometimes it’s very hard to port an Ubuntu-based image to Chainguard. Support also feels a little pricey for what you get.
What problems is the product solving and how is that benefiting you?
Applying manual OS-level security patches on base images and language security patches is very time-consuming. It takes a lot of time and ensures our system is very secure.
Logistics and Supply Chain
Smooth Onboarding, Great UI, and Strong Value for Deep Insights
Reviewed on Sep 30, 2026
Review provided by G2
What do you like best about the product?
The overall offering follows a solid, consumer-friendly pattern: there is enough basic information available to get initial insights, and then a fully detailed level of information behind the paywall (which is fine, since that is their product). The web interface and the console interface for searching, viewing, and deep-diving into their deliverables are really good and work like a charm. The overview, as well as the integration into our artifact management system, was about as easy as it could be.
From a pricing perspective, it would not be realistic to do this on your own at lower cost, and building up the required expertise would already overwhelm most companies.
Regarding onboarding, support, and help, we even had a dedicated person during the first weeks, before it switched over to the standard support channels.
From a pricing perspective, it would not be realistic to do this on your own at lower cost, and building up the required expertise would already overwhelm most companies.
Regarding onboarding, support, and help, we even had a dedicated person during the first weeks, before it switched over to the standard support channels.
What do you dislike about the product?
Right now, the focus seems to be on containers and Helm charts. Adding some attention to bare VM images as well would be very beneficial.
What problems is the product solving and how is that benefiting you?
They fix CVEs in the OS and, when possible, at the application layer as well. This saves an immense amount of time compared to using open-source containers pulled from the internet.
With regulations like NIS2 and the CRA, this is becoming an obligation that will affect every software company.
With regulations like NIS2 and the CRA, this is becoming an obligation that will affect every software company.
Samuel P.
Great Communication and Support, Always Easy to Reach
Reviewed on Sep 18, 2026
Review provided by G2
What do you like best about the product?
Good communication and good support. They are easy to reach whenever I need help.
What do you dislike about the product?
So far, everything has been fine, and I don’t have anything to complain about.
What problems is the product solving and how is that benefiting you?
Avoid spending time fixing CVEs. Fixing CVEs is not part of Vanderande’s business.
Anonymous
Robust Vulnerability Fixes and Exemplary Community Support
Reviewed on Sep 04, 2026
Review provided by G2
What do you like best about the product?
I appreciate Chainguard's comprehensive library of patched packages and their prompt responsiveness when we need quick fixes. I love their training and community building efforts; I always leave sessions feeling well-informed and better prepared for my job. It's also very easy to get access and create an API key, which adds to the convenience of using Chainguard.
What do you dislike about the product?
Nothing, I love their service and solutions.
What problems is the product solving and how is that benefiting you?
I use Chainguard to fix software vulnerabilities by providing secure base images, and they keep me informed on newly published CVEs with a quick feedback loop and prompt fixes.
Anonymous
Secure and Up-to-Date Kubernetes Images Made Easy
Reviewed on Aug 03, 2026
Review provided by G2
What do you like best about the product?
I like that Chainguard provides secure images for our Kubernetes platform, which means fewer security issues to deal with personally. I appreciate that the images are readily available and updated frequently, and I find it easy to request missing images or updates. Setting up my login and the credential helper was very easy too.
What do you dislike about the product?
Nothing comes to mind.
What problems is the product solving and how is that benefiting you?
Chainguard provides secure images for Kubernetes, reducing security issues. I don't have to handle those issues myself. Images are readily available, frequently updated, and requesting updates is easy.