Organizations today face significant risks from vulnerabilities in base container images and opaque software supply chains, which often lead to security breaches and compliance failures. Traditional image building processes lack transparency and frequently include unnecessary packages that expand the attack surface. CleanStart addresses these challenges by providing a software platform that builds container images from the ground up using a deterministic and hermetic build system.
The platform delivers hardened, debloated container images that are built from source and aligned with SLSA Level 4 principles for strong provenance and transparency. By ensuring near-zero known vulnerabilities at the time of release, CleanStart provides a secure foundation for enterprise applications. This transition from vulnerable public images to verifiable, minimal images allows security teams to maintain a proactive posture against supply chain threats.
Core capabilities include native SBOM and AI BOM generation, cryptographic verification, and policy-driven enforcement for container security. CleanStart helps organizations simplify compliance with standards such as CIS Benchmarks, DISA STIGs, and FIPS 140-3. Typical use cases involve securing cloud-native applications, establishing trusted internal registries, and automating vulnerability management within the DevOps lifecycle.
Highlights
Secure and verifiable container images built from source using deterministic and hermetic build systems aligned with SLSA Level 4 principles.
Automated generation of SBOM and AI BOM providing full transparency and traceability for all components within the software supply chain.
Hardened and debloated images that comply with CIS Benchmarks and DISA STIGs to reduce attack surface and simplify security audits.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This listing offers one pricing dimension: For Individual Users, billed per unit under a contract. You buy units that give you access to CleanStart hardened container images across the latest three releases. Pricing scales with the number of units you purchase, so cost grows as you add more users. There are no separate tiers or instance sizes to choose from. The single unit-based structure keeps billing simple and predictable for individual user access.
Top-of-mind questions for buyers
What does one unit cover, and what are the latest three releases?
One unit gives an individual user access to CleanStart hardened container images. The latest three releases mean the three most recent published versions of each image. As new versions ship, your access moves forward to cover the current three, so you stay on continuously rebuilt images.
How does my cost change as I add more individual users?
Cost scales directly with the number of units you buy. Each unit represents one individual user's access. Adding users means adding units, and each added unit is billed at the same per-unit rate. There are no tiers or size choices that change the rate as you grow.
What image types are included with a unit of access?
Your unit covers hardened container images built from trusted upstream sources with reduced attack surface. These images include a software bill of materials and verifiable provenance. They work with existing registries and CI/CD pipelines, so you replace base images without major refactoring.
www.cleanstart.com+1
Helpful?
Vendor refund policy
All fees are non-refundable. We do not provide refunds or credits for partial subscription periods or unused services. All sales are final.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.