Softwr

Government · head to head

Clariti vs Sigstore

Clariti logo

Clariti

Government

Permitting, licensing and land management for local government, built natively on Salesforce

From
On request
Free plan
No
Full reviewWebsite
Sigstore logo

Sigstore

Cybersecurity

Free public signing and transparency infrastructure for open source artifacts

From
Free
Free plan
Yes
Full reviewWebsite

The short version

  • Only Sigstore has a free tier, so it costs nothing to try first.
  • Each has a real cost: Clariti salesforce platform licences sit underneath the subscription and are not always visible in the initial quote, so the fully loaded cost can be materially higher than the comparison against Accela or Tyler suggests.; Sigstore the security model depends on somebody watching the log. The documentation states that compromise of an identity provider or of Fulcio itself is detectable only if third parties monitor the transparency log, the monitoring tool is a community-tier rather than core project, and almost no consumer runs one.
  • They diverge on capability: Clariti covers Permitting workflows, Sigstore covers Fulcio.
  • Prices and features above were last checked on 31 August 2026.

Where they differ

Only the attributes on which Clariti and Sigstore actually diverge.

Attributes where Clariti and Sigstore differ
AttributeClaritiSigstore
Starting priceOn requestFree
Pricing modelquoteOpen source, public instance free to use
Free tierNoYes
PlatformsWeb, iOS, AndroidWeb, Linux, macOS, Windows, Self-hosted
CategoryGovernmentCybersecurity

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Clariti

  • Permitting workflows
  • Business licensing
  • Inspections
  • Code enforcement
  • Public portal
  • Salesforce platform tooling

Only in Sigstore

  • Fulcio
  • Rekor
  • Keyless signing
  • Multi-language clients
  • Timestamp authority
  • Neutral governance

What people use each for

The jobs each tool is most often brought in to do.

Clariti

  • A city already standardised on Salesforce that wants permitting inside the same platformnot Sigstore
  • An agency replacing a legacy permitting system whose vendor was acquired and whose roadmap stallednot Sigstore
  • A county needing configurable workflows across permits, licensing and code enforcementnot Sigstore
  • An IT department that wants to configure and report on its own permitting workflows without vendor ticketsnot Sigstore

Sigstore

  • Open source projects signing releases without running a certificate authoritynot Clariti
  • Organisations meeting a signed-artifact requirement without buying a signing productnot Clariti
  • Publishing provenance that a consumer can verify independently of younot Clariti
  • Self-hosting the same components where a public log is unacceptablenot Clariti

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Clariti

  • Salesforce platform licences sit underneath the subscription and are not always visible in the initial quote, so the fully loaded cost can be materially higher than the comparison against Accela or Tyler suggests.
  • Building on Salesforce means the agency inherits Salesforce release cycles and pricing changes, neither of which Clariti controls.
  • It has far less accumulated edge case handling than the incumbents, so unusual fee schedules, historic district rules or state mandated reporting can become configuration projects.
  • Professional services dominate the first year cost, as with every permitting implementation, and agencies that budget only for licence are the ones whose projects stall.
  • The install base is smaller than Accela or Tyler, so there are fewer peer agencies to call for reference and fewer trained implementation consultants in the market.

Sigstore

  • The security model depends on somebody watching the log. The documentation states that compromise of an identity provider or of Fulcio itself is detectable only if third parties monitor the transparency log, the monitoring tool is a community-tier rather than core project, and almost no consumer runs one.
  • It is a 99.5 percent objective with no service level agreement, which permits several hours of downtime a month and offers no remedy. A pipeline that signs on every build has taken a hard dependency on a free service with no contract behind it.
  • Log scale is a live engineering problem rather than a theoretical one. The active shard holds billions of entries, the log has already been sharded twice, and sharding version 1 requires stopping traffic, which is why a replacement was built.
  • Ten-minute certificates make trust depend on log availability. Verifying an older signature relies on the log entry proving it was made inside that window, so a lost or unreachable entry can render a valid artifact unverifiable.
  • Migration debt is substantial and ongoing. Version 2 of the log is generally available but not the public default, the signing client has an announced breaking release ahead, some official clients lag the new log format, and a post-quantum migration is named as the next break after that.

Pricing, plan by plan

Clariti

On request
  • Clariti$undefined/year
    • Quoted by agency size and module scope
    • Salesforce platform licences are a separate cost underneath the subscription
    • Implementation and configuration services typically exceed first year licence cost

Sigstore

Free
  • Public good instanceFree
    • Free to everyone with no contract
    • 99.5 percent availability objective, not an agreement
    • 100KB cap per attestation upload
  • Self-hostedFree
    • Apache-2.0
    • Run your own Fulcio and Rekor
    • Rekor v2 available for self-hosters

Which should you pick?

Choose Clariti if

  • You need permitting workflows.
  • You work on Web, iOS, Android.
  • You also want business licensing.
Clariti review

Choose Sigstore if

  • You need fulcio.
  • You want to start without paying.
  • You work on Web, Linux, macOS, Windows, Self-hosted.
  • You also want rekor.
Sigstore review

Questions people ask

Is Clariti or Sigstore better?
Neither clearly leads. Clariti starts at On request and Sigstore at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Clariti or Sigstore?
Sigstore has a free tier; the other does not. Paid plans start at On request for Clariti and Free for Sigstore.
Does Clariti or Sigstore run on more platforms?
Clariti runs on Web, iOS, Android. Sigstore runs on Web, Linux, macOS, Windows, Self-hosted.
Can I use Sigstore for free?
Yes. Sigstore has a free tier, so you can try it without paying. Clariti starts at On request.
What is Clariti best used for?
Clariti is most often used for a city already standardised on salesforce that wants permitting inside the same platform, an agency replacing a legacy permitting system whose vendor was acquired and whose roadmap stalled, a county needing configurable workflows across permits, licensing and code enforcement, an it department that wants to configure and report on its own permitting workflows without vendor tickets. Of those, a city already standardised on salesforce that wants permitting inside the same platform and an agency replacing a legacy permitting system whose vendor was acquired and whose roadmap stalled are not what Sigstore is typically brought in for.
What can Clariti do that Sigstore cannot?
Clariti covers Permitting workflows, Business licensing, Inspections, Code enforcement. Sigstore covers Fulcio, Rekor, Keyless signing, Multi-language clients.

Answered from the vendors’ own pages

Clariti: Do we need Salesforce licences as well?

Yes. Clariti runs on the Salesforce platform, and those licences are a separate line item. Insist on a fully loaded quote.

Sigstore: Is the public instance really free?

Yes, with no contract and no paid tier. That is also the weakness: a 99.5 percent objective with no agreement, no remedy and support through Slack.

Clariti: How does it compare with Accela?

Accela has far deeper accumulated handling of edge cases. Clariti offers a more modern and configurable platform, at the price of Salesforce underneath.

Sigstore: Has the public log moved to Rekor v2?

No. Version 2 reached general availability in October 2025 and self-hosters can use it, but the public instance still defaults to version 1 and the project has said it will for the foreseeable future.

Clariti: Can we see what other agencies paid?

Yes. Permitting contracts are public records and award notices routinely list implementation and annual subscription values.

Sigstore: Does Sigstore make my dependencies safe?

No, and this is a category error worth avoiding. It tells you who published something. It has no knowledge of what the artifact contains or whether it is vulnerable.

Clariti: Is it suitable for a small town?

Usually not. The platform cost and implementation effort suit mid sized and larger agencies.

Sigstore: What are the rate limits?

Not published. Only the 100KB cap per attestation upload is documented, so do not design a high-volume pipeline around assumed throughput.

Sigstore: Should we self-host it?

If a public record of every signature is unacceptable, or if a free service with no agreement cannot sit in your build path, then yes. Otherwise the public instance is what most projects use.

Share

Related pages

More on Clariti

More on Sigstore

Keep looking

Other head to heads