Softwr

Government · head to head

MyRec.com vs Sigstore

MyRec.com logo

MyRec.com

Government

Recreation management for small parks departments, priced on your annual revenue with no contract

From
On request
Free plan
No
Full reviewWebsite
Sigstore logo

Sigstore

Cybersecurity

Free public signing and transparency infrastructure for open source artifacts

From
Free
Free plan
Yes
Full reviewWebsite

The short version

  • Only Sigstore has a free tier, so it costs nothing to try first.
  • Each has a real cost: MyRec.com the annual fee scales with department revenue, so a successful department pays more for the same software as its programme income grows.; Sigstore the security model depends on somebody watching the log. The documentation states that compromise of an identity provider or of Fulcio itself is detectable only if third parties monitor the transparency log, the monitoring tool is a community-tier rather than core project, and almost no consumer runs one.
  • They diverge on capability: MyRec.com covers Revenue-based annual fee, Sigstore covers Fulcio.
  • Prices and features above were last checked on 31 August 2026.

Where they differ

Only the attributes on which MyRec.com and Sigstore actually diverge.

Attributes where MyRec.com and Sigstore differ
AttributeMyRec.comSigstore
Starting priceOn requestFree
Pricing modelPer year by department annual revenueOpen source, public instance free to use
Free tierNoYes
PlatformsWebWeb, Linux, macOS, Windows, Self-hosted
CategoryGovernmentCybersecurity

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in MyRec.com

  • Revenue-based annual fee
  • Programme registration
  • Facility reservations
  • Point of sale
  • League scheduling
  • Everything included

Only in Sigstore

  • Fulcio
  • Rekor
  • Keyless signing
  • Multi-language clients
  • Timestamp authority
  • Neutral governance

What people use each for

The jobs each tool is most often brought in to do.

MyRec.com

  • A town recreation department of one or two staff moving off paper registration forms and a shared spreadsheetnot Sigstore
  • A department that wants to choose its own payment processor rather than accept the software vendor ratenot Sigstore
  • Replacing a system that charges per module, where every new programme type triggered an upsellnot Sigstore
  • A department needing field permits and league scheduling without buying a facilities management suitenot Sigstore

Sigstore

  • Open source projects signing releases without running a certificate authoritynot MyRec.com
  • Organisations meeting a signed-artifact requirement without buying a signing productnot MyRec.com
  • Publishing provenance that a consumer can verify independently of younot MyRec.com
  • Self-hosting the same components where a public log is unacceptablenot MyRec.com

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

MyRec.com

  • The annual fee scales with department revenue, so a successful department pays more for the same software as its programme income grows.
  • It is built for small and mid-sized departments and lacks the permitting, aquatics and multi-facility depth a large city requires.
  • Credit card processing is explicitly excluded from the fee, so the total cost depends on a merchant agreement the department must source and negotiate itself.
  • Integration surface is thin, with no meaningful connection to municipal ERP or finance systems, meaning revenue reconciliation is a manual export.
  • The vendor is small, so there is limited third-party consulting capacity and a narrow bench for support during peak registration periods.

Sigstore

  • The security model depends on somebody watching the log. The documentation states that compromise of an identity provider or of Fulcio itself is detectable only if third parties monitor the transparency log, the monitoring tool is a community-tier rather than core project, and almost no consumer runs one.
  • It is a 99.5 percent objective with no service level agreement, which permits several hours of downtime a month and offers no remedy. A pipeline that signs on every build has taken a hard dependency on a free service with no contract behind it.
  • Log scale is a live engineering problem rather than a theoretical one. The active shard holds billions of entries, the log has already been sharded twice, and sharding version 1 requires stopping traffic, which is why a replacement was built.
  • Ten-minute certificates make trust depend on log availability. Verifying an older signature relies on the log entry proving it was made inside that window, so a lost or unreachable entry can render a valid artifact unverifiable.
  • Migration debt is substantial and ongoing. Version 2 of the log is generally available but not the public default, the signing client has an announced breaking release ahead, some official clients lag the new log format, and a post-quantum migration is named as the next break after that.

Pricing, plan by plan

MyRec.com

On request
  • MyRec.com$undefined/year
    • Single annual fee calculated from department annual revenue
    • Third parties report entry around 2,850 to 3,445 USD per year
    • Site build, onboarding and training included

Sigstore

Free
  • Public good instanceFree
    • Free to everyone with no contract
    • 99.5 percent availability objective, not an agreement
    • 100KB cap per attestation upload
  • Self-hostedFree
    • Apache-2.0
    • Run your own Fulcio and Rekor
    • Rekor v2 available for self-hosters

Which should you pick?

Choose MyRec.com if

  • You need revenue-based annual fee.
  • You also want programme registration.
MyRec.com review

Choose Sigstore if

  • You need fulcio.
  • You want to start without paying.
  • You work on Web, Linux, macOS, Windows, Self-hosted.
  • You also want rekor.
Sigstore review

Questions people ask

Is MyRec.com or Sigstore better?
Neither clearly leads. MyRec.com starts at On request and Sigstore at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, MyRec.com or Sigstore?
Sigstore has a free tier; the other does not. Paid plans start at On request for MyRec.com and Free for Sigstore.
Does MyRec.com or Sigstore run on more platforms?
MyRec.com runs on Web. Sigstore runs on Web, Linux, macOS, Windows, Self-hosted.
Can I use Sigstore for free?
Yes. Sigstore has a free tier, so you can try it without paying. MyRec.com starts at On request.
What is MyRec.com best used for?
MyRec.com is most often used for a town recreation department of one or two staff moving off paper registration forms and a shared spreadsheet, a department that wants to choose its own payment processor rather than accept the software vendor rate, replacing a system that charges per module, where every new programme type triggered an upsell, a department needing field permits and league scheduling without buying a facilities management suite. Of those, a town recreation department of one or two staff moving off paper registration forms and a shared spreadsheet and a department that wants to choose its own payment processor rather than accept the software vendor rate are not what Sigstore is typically brought in for.
What can MyRec.com do that Sigstore cannot?
MyRec.com covers Revenue-based annual fee, Programme registration, Facility reservations, Point of sale. Sigstore covers Fulcio, Rekor, Keyless signing, Multi-language clients.

Answered from the vendors’ own pages

MyRec.com: How is MyRec priced?

A single annual fee calculated from your department annual revenue, using a calculator on the MyRec site. Third parties report entry around 2,850 to 3,445 USD a year.

Sigstore: Is the public instance really free?

Yes, with no contract and no paid tier. That is also the weakness: a 99.5 percent objective with no agreement, no remedy and support through Slack.

MyRec.com: Is there a setup fee?

No. Site build, onboarding and training are included in the annual fee.

Sigstore: Has the public log moved to Rekor v2?

No. Version 2 reached general availability in October 2025 and self-hosters can use it, but the public instance still defaults to version 1 and the project has said it will for the foreseeable future.

MyRec.com: Are card fees included?

No. Credit card processing is separate and you arrange your own merchant account.

Sigstore: Does Sigstore make my dependencies safe?

No, and this is a category error worth avoiding. It tells you who published something. It has no knowledge of what the artifact contains or whether it is vulnerable.

MyRec.com: Is there a contract?

No long-term contract is required, which is unusual in municipal software.

Sigstore: What are the rate limits?

Not published. Only the 100KB cap per attestation upload is documented, so do not design a high-volume pipeline around assumed throughput.

Sigstore: Should we self-host it?

If a public record of every signature is unacceptable, or if a free service with no agreement cannot sit in your build path, then yes. Otherwise the public instance is what most projects use.

Share

Related pages

More on MyRec.com

More on Sigstore

Keep looking

Other head to heads