Sold by: Varnish Software AB
Varnish Artifact Firewall Pro is a vendor-neutral runtime security layer that protects your software supply chain by governing every artifact request, from CI/CD pipelines to Kubernetes clusters and AI/ML environments. Unlike scanners that inspect packages after they have already been pulled, it enforces policy at the moment of request across npm, PyPI, Maven, and NuGet, blocking vulnerable or non-compliant artifacts before they enter your environment.
Overview
Modern software delivery has fundamentally changed. Today's engineering organizations pull thousands of packages automatically, across dozens of CI/CD pipelines, running continuously across distributed Kubernetes clusters and GPU-driven AI environments. The velocity that makes this possible is also what makes it dangerous. Supply chain attacks have grown in both frequency and sophistication, not because attackers have become more sophisticated, but because they have learned to exploit the trust and automation that modern development depends on. A compromised package published to a public registry can propagate into hundreds of production environments within minutes, before any human has had a chance to review it. Varnish Artifact Firewall is built for this environment. It is a dedicated runtime security layer that sits in the artifact request path and evaluates every dependency before it enters your infrastructure whether that request originates from a developer workstation, a CI/CD pipeline, a Kubernetes cluster, or an AI training job. Unlike traditional repository-based scanners that evaluate artifacts after ingestion, Varnish Artifact Firewall enforces security policy at the moment of request, before known vulnerable or non-compliant artifacts are allowed to propagate. Newly published and unknown threats can be held in quarantine long enough for the community to flag malicious uploads. It can also be deployed alongside Varnish Virtual Registry, to combine policy enforcement with high-performance artifact caching and routing to dramatically reduce artifact latency and dependency resolution time.
Highlights
- Secure the platform: Enforce runtime security across your entire software supply chain: block known vulnerable or compromised packages, quarantine newly published versions until they can be reviewed, and prevent dependency confusion attacks, governing every artifact request before it reaches your environment.
- Vendor-neutral by design: Varnish Artifact Firewall sits in front of the registries and repository managers you already run, with no lock-in to a backend platform and no changes to developer workflow. Secure your entire software supply chain, regardless of your existing architecture and vendors.
- Policy as code, zero-risk rollout: Manage dependency policy as declarative YAML rulesets, versioned and distributed through Git. Prebuilt OSV.dev rules give you a maintained baseline to extend with your own policies, and rulesets reload at runtime without service interruption. Start in report mode to see exactly what would have been blocked before enforcing anything, then deploy as a Docker image, Helm chart, or Linux package.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Active Developers | Up to 50 active developers | $20,000.00 |
Dimensions summary
This listing uses a single contract dimension priced by the number of active developers. You buy coverage for up to 50 active developers under the Pro plan. Pricing scales by user count rather than by usage, builds, or data volume. Because there is one dimension, you pay a flat contract rate for that developer capacity, not a metered or per-request charge. The firewall itself sits in front of the registries you already run and enforces dependency policy, but your cost is tied only to the number of developers covered.
Top-of-mind questions for buyers
An active developer is a user whose requests pass through the firewall in the delivery path. The Pro plan covers up to 50 such users. Because enforcement sits in front of your registries, there is nothing to install per machine, but each covered developer counts toward the limit.
No. This contract is priced only by active developer count, up to 50 users. It does not meter package requests, build concurrency, or data volume. Automated machine-to-machine traffic, CI runners, and continuous pulls do not add per-request charges. Your cost stays tied to the number of developers covered.
The Pro plan covers up to 50 active developers. This listing does not describe automatic overage charges beyond that count. If your team exceeds 50 developers, contact the vendor to discuss coverage that matches your developer count.
varnish-software.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Varnish Virtual Registry Pro includes Standard Support which includes:
- Up to 20 support requests per year
- Availability during business hours (8 am to 5 pm)
- Email support, with telephone support for critical issues Access to the Varnish knowledgebase and software repositories Support reviews and on-site consultancy are available as paid options. Premium Support, with 24/7/365 availability, unlimited support requests, faster response times, and guaranteed SLAs for critical issues, is available as an add-on or as part of the Enterprise tier.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for pre-configuration and packaging by Intuz. Deploy MLflow with an integrated MinIO artifact store, fully secured and pre-configured for seamless ML experiment tracking and artifact storage. Ideal for teams managing end-to-end machine learning lifecycles.
Cloudsmith is the only cloud-native, global, universal artifact management platform to securely develop and distribute software.
This product includes Nexus Repository® OSS an open-source repository that provides software development teams and IT operations a single place to store software artifacts.
Build fast with the world's leading artifact repository manager.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.