Sold by: ANCHORE INC
Deployed on AWS
Anchore Enterprise is an SBOM-powered Software Composition Analysis (SCA) solution that provides scanning and continuous monitoring of cloud native applications enabling automated security and compliance across the entire software lifecycle (Code to Cloud).
4.4
Overview
Anchore Enterprise is a self-hosted SCA tool used to secure enterprise and public sector applications and automate compliance against the most stringent government and industry security standards. Its out-of-the-box policy packs automate the enforcement of NIST, CISA, FedRAMP, CMMC and CIS standards and benchmarks; The Federal edition additionally provides support for compliance to DOD/DISA standards, FIPS compliance, and is deployable from IL2 up to IL6 air-gapped classified environments.
End to end SBOM management Automatically generate comprehensive SBOMs at each step in the SDLC and store them for use in monitoring for new vulnerabilities and risks - even post deployment. Detect SBOM drift by setting policy rules that alert when components are added, changed or removed and identify errors and malicious efforts to infiltrate builds. Make SBOMs available at any time when requested by auditors, government agencies, or downstream consumers.
Continuous scanning & monitoring Automated scanning of container images for vulnerabilities, malware, and secrets in development pipelines, container registries, and runtime environments with reduced false positives and negatives from best in class vulnerability matching and policy-driven tuning.
Automated compliance enforcement & reporting Add compliance checks into build pipelines to shift compliance left. Monitor registries and runtime environments to maintain continuous compliance. Policies include rules for vulnerability thresholds, regex, applicable standard, software licensing requirements, etc. Robust Reporting capabilities enable proof of evidence as required by security, GRC, and outside auditors.
Highlights
- Automated Compliance: Adhere to various regulatory standards and industry best practices, such as DoD/Zero Trust, PCI, FedRAMP, CISA, and NIST through continuous monitoring and reporting on compliance status.
- Ease of Integration: Leverage fully supported integrations with widely adopted DevOps tools and Cloud services, including major CI/CD tools (GitLab, Jenkins, Cloudbees, Github, etc), container registries, SSO/LDAP, and container platforms (EKS, ECS, Rancher, Openshift, etc).
- End to End Software Supply Chain Security: Leverage the power of SBOMs to know what is in the software you consume, produce, and distribute. Be proactively ready for the next Zero Day event.
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Helm Chart Installation
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Anchore Enterprise Helm | For a distributed Anchore Enterprise deployment using Helm. Relates to Federal (Ultimate) and Enterprise (Advanced), see https://anchore.com/pricing/ for details. | $50,000.00 |
Anchore Enterprise Cloud Image | A single host Anchore Enterprise deployment using AECI, see https://docs.anchore.com/current/docs/deployment/cloud_image/ for further details. | $34,500.00 |
Essential Customer Success Plan | An addon service plan providing service and support for your Anchore Enterprise deployment, see https://anchore.com/pricing/ for details. | $15,000.00 |
Dimensions summary
This listing bills through a contract with three separate options, all priced by units. You pick a deployment method based on how you want to run the software. The Anchore Enterprise Helm option supports a distributed install on Kubernetes-compatible platforms, suited to scale-out setups. The Anchore Enterprise Cloud Image option provides a single-host machine image for AWS with built-in infrastructure services. The Essential Customer Success Plan is an add-on service that layers support onto your deployment. You can combine a deployment option with the support add-on to fit your needs.
Top-of-mind questions for buyers
Both deployment options are billed by units tied to your scanning volume. The platform generates and scans SBOMs, and plans reference SBOMs per month as a scaling metric. Your unit count reflects the deployment size and monthly SBOM activity you need, not a fixed server or user count.
The Cloud Image option runs as a single-host machine image on AWS with infrastructure services built in, suited to smaller teams wanting a quick setup. The Helm option installs container images across Kubernetes-compatible platforms, suited to centralized teams building a scale-out environment with custom settings and integrations.
The Essential Customer Success Plan is a separate add-on, billed by units alongside your chosen deployment. It adds a 24x7 priority SLA, on-demand expert access, and healthchecks on top of basic support. You pay for both the deployment and the support plan as distinct line items.
www.anchore.com
Helpful?
Vendor refund policy
No refunds
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Helm Chart Installation
Supported services: Learn more
- Amazon EKS
Helm chart
Helm charts are Kubernetes YAML manifests combined into a single package that can be installed on Kubernetes clusters. The containerized application is deployed on a cluster by running a single Helm install command to install the seller-provided Helm chart.
Version release notes
See https://docs.anchore.com/current/docs/release_notes/enterprise/5270/ for details.
Additional details
Usage instructions
To deploy Anchore Enterprise:
- Create a Kubernetes secret containing the license file provided to you in the welcome email you receive from Anchore:
kubectl create secret generic anchore-enterprise-license --from-file=license.yaml=<PATH/TO/LICENSE.YAML>
- create a Kubernetes secret containing DockerHub credentials with access to the private Anchore Enterprise software:
kubectl create secret docker-registry anchore-enterprise-pullcreds --docker-server=docker.io --docker-username=<DOCKERHUB_USER> --docker-password=<DOCKERHUB_PAT>
- add the helm chart from the Anchore repo:
helm repo add anchore https://charts.anchore.io
- deploy using the helm chart and values file:
helm install anchore anchore/enterprise -f anchore_values.yaml
See here for further instructions and details, specific to AWS EKS: https://docs.anchore.com/current/docs/deployment/helm/eks/
Resources
Support
Vendor support
Anchore provides 2 tiers of customer support depending on subscription type purchased (8x5 and 24x7); Additionally, Anchore optionally offers US-only based Support for customers requiring such and 2 enhanced Customer Success packages.
Subscription enabled support: Basic: Our basic support package comes standard with any purchase of Anchore Federal Basic subscriptions and provides web-based, 8x5 support.
Premium: Our premium support package comes standard with any purchase of Anchore Federal Premium subscriptions and provides web-based, 24x7 support.
Optional: US-only based Support may also be purchased as an add-on to any subscription.
Optional Customer Success Packages: Essential: Our Essential package provides the following additional support beyond our subscription based support: 1) Anchore Expert Office Hours, 2) Upgrade Assistance, and 3) Ongoing Health checks.
Complete: Our highest tier of customer support provides customers with a designated Customer Success Manager to deliver all of the following: 1) Anchore Expert On-demand Best Practices, 2) Upgrade Assistance, 3) Ongoing Health checks, 4) Workshop Support, 5) Quarterly Business Reviews (QBRs) and 6) Proactive Escalation Management.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Anchor Browser is agentic infrastructure for web automation, enabling AI agents to complete any web-based process by clicking, typing, navigating, and reasoning like a human in real time. It removes integration barriers across disconnected apps, making even complex manual workflows fully automatable.
Cloud Migration Anchor - Baseline Environment Setup for AWS provides a secure, governed AWS foundation required to safely receive migrated workloads. The service establishes core AWS accounts, organisational structure, identity controls, logging, and essential security guardrails aligned with AWS best practices and migration readiness requirements.
Designed for organisations accelerating cloud adoption, this professional service enables compliant and operationally ready AWS environments with the option to upgrade to a full enterprise Landing Zone Accelerator.
Qucoon's AWS Advanced Consulting Services helps enterprises design, migrate, and optimise cloud infrastructure on AWS with speed and confidence. As an AWS Advanced Consulting Partner with deep expertise across FSI, energy, and public sector, we deliver architecture, migration, security, and managed services tailored to your business outcomes.
This product has charges associated with it for technical support with a 24-hour response time. This AMI contains MySQL 8.4 LTS on CentOS Stream 9, repackaged by Easycloud. The system is built on a minimal installation of CentOS Stream 9 updated to the latest version, and includes continuous updates and support to ensure a secure and stable foundation.
Customer reviews
Raja A.
Love the intuitive interface and dashboard to assess security posture in a single place
Reviewed on Apr 15, 2025
Review provided by G2
What do you like best about the product?
I have been using Anchore for container image scans for more than a year and the interface is clean and easy to use. Was able to integrate it to DefectDojo and then Jira, so now our security issues remediation workflows could be well planned from the backlog as the tickets have all the required details and prioritised by due dates. I have been using Policy Compliance and Vulnerabilities tabs in the dashboard exclusively and they give a good summary of the overall issues identified for an artifact.
What do you dislike about the product?
SBOM takes time to load but otherwise the information is good.
What problems is the product solving and how is that benefiting you?
Continous Security. Anchore helps to plan and address the security tech debt in our sprints on a timely manner.
Dr habeeb M.
Anchore: Essential Tool for Container Security and Compliance
Reviewed on Aug 20, 2024
Review provided by G2
What do you like best about the product?
The main advantage of Anchore is how easy it is to use in our DevOps pipeline. We love the automated container security tool that is scalable and thorough. Since we began looking for a cloud-native security solution, we have been delighted to have it. It not only provides vulnerability checks for our containerized applications and reports, but it also complements our container strategy for automated security. Furthermore, Anchore bolsters the security checks by providing customizable policies which help us uphold our security based on industry standards and internal guidelines.
What do you dislike about the product?
The first experience to set up and configure maybe complex, particularly for teams that are new to container security tools. The learning curve is steep, and additional documentation or guided tutorials would be beneficial.
What problems is the product solving and how is that benefiting you?
Container security and accurate SBOM generation are both significant challenges that Anchore is helping us address in our DevOps environment. When we integrated Anchore into our CI/CD pipeline, it had an immediate impact, reducing the chances of us deploying vulnerable containers. By conducting thorough image scanning, Anchore tells us about any security vulnerabilities, misconfigurations or policy violations before the container ends up in production - which ensures our applications are secure and compliant.
Hospital & Health Care
Anchore
Reviewed on Mar 22, 2022
Review provided by G2
What do you like best about the product?
The flawless software supply chain tool. Haven't seen any other software that robust
What do you dislike about the product?
The Ui can be slightly better , just feels a little old school from my perspective
What problems is the product solving and how is that benefiting you?
Trying to contain the vulnerabilities to secure the platform
Recommendations to others considering the product:
Keep improving this great product. Totally in love with this.
Peter L.
Good quickstart, easy to get started and docker native
Reviewed on Apr 28, 2020
Review provided by G2
What do you like best about the product?
Very powerful, policy capabilities are a key differentiator which enable it to support real world CI/CD workflows.
What do you dislike about the product?
The CLI requires python to run native, but its docker native so only an issue on my workstation.
What problems is the product solving and how is that benefiting you?
It prevents vulnerabilities from shipping and embarrassing the company with key customers.
Recommendations to others considering the product:
Consider Anchore with complex workflows or more sophisticated requirements. The product has an internal database that supports complex rules for a wide variety of use cases.