What do you like best about the product?

Security is hard on its own, and while many vendors focus on selling detection products, Chainguard does the opposite and solve a painful problem with little effort from users.

What do you dislike about the product?

Chainguard offers some free to use images, but only "latest" version and not stable versions. This makes impossible to use as an individual or for open source projects.

What problems is the product solving and how is that benefiting you?

Zero security vulnerability containers.

What do you like best about the product?

- Very small image size,
- Very small to none CVEs from my experiences.
- Very large repo supporting many languages and technologies,
- Ease to use,
- Ease of implementation.

What do you dislike about the product?

A great part of it, is free, but for some custom implementation or features , you may pay.

What problems is the product solving and how is that benefiting you?

CVEs, better quality software.

What do you like best about the product?

It's simplicity. Changing from a regular Image to use a Chainguard image as the base helps mitigate a lot of vulnerabilities, and it's a change any developer would be able to easily implement.

This is something that I would recommand to any developer or business that is looking to harden their applications. Securing the base image is the first step everyone should take.

What do you dislike about the product?

I have some uncertaincies about what the support will look like for users using the Developer Free tier in the future. Would like them to sllow all image versions and not just latest/stable for Free Tier.

What problems is the product solving and how is that benefiting you?

Bring simplicity to security. It hardens the application image that our containers use to run.

What do you like best about the product?

Since implementing Chainguard's hardened base images, we've seen a dramatic reduction in vulnerabilities—over 70%. This reduction not only enhances our security posture but also saves our engineering teams an enormous amount of time that would otherwise be spent on vulnerability management and patching. Chainguard's approach introduces excellent security practices out of the box, meaning our engineers no longer have to worry about critical security concerns like rootless containers, proper permissions, and secure registries.

Chainguard sets itself apart by providing supply chain security through purpose-built packages in their registry, making it clear that while competitors might still be playing catch-up in the minor leagues, Chainguard is clearly in a league of its own, setting the standard for supply chain security. We've maximized the value of these images by ensuring reuse across our organization, categorizing images into language-based and application-based groups. This strategy allows us to gain the most value through frequent reuse of language-based images, while our centralized platform engineering teams benefit from using application-specific images at a different scale.

To drive adoption, we've integrated Chainguard images into our centralized internal developer portal, which our developers are already familiar with and use regularly. This seamless integration has significantly boosted adoption rates, further supported by our vulnerability management reduction program. Through this program, we've been able to recommend Chainguard images, reassuring teams that transitioning will save time and energy.

The service level agreements (SLAs) provided by Chainguard are also very attractive. The high speed of image updates ensures that we are always protected with the latest security enhancements. We've even integrated Chainguard into our automatic update tools, so our developers are always confident that they're working with the most up-to-date versions.

Overall, Chainguard's hardened base images have been a game-changer for our organization, providing unparalleled security, efficiency, and peace of mind.

What do you dislike about the product?

The documentation at times fall a little behind and the modern authentication mechanisms at times can create difficulties in integrating with other existing platforms that are not yet supportive of technologies like OIDC. Quite a few of the images require rework to convert from a standard Dockerhub image however, I believe that's expected.

What problems is the product solving and how is that benefiting you?

Reducing container, image, vulnerabilities and creating a solid secure base to build upon

What do you like best about the product?

Chainguard allows developers to save a lot of time and effort by providing ready-to-use container images that are secure. In addition, the images provided are very lightweight.

What do you dislike about the product?

The custom linux distribution may be harder to work with, but wolfi-base is still quite similar to Alpine and hence not too complex.

What problems is the product solving and how is that benefiting you?

They provide off the shelf image solutions to secure you deployment/release containers. In other words, Chainguard allows you to secure the environment in which you deploy your applications to.