Cybersecurity · pricing
Sigstore pricing
Sigstore publishes 2 tiers. Below is each one, what it adds over the tier beneath it, and where the ladder stops being worth climbing for most people.
As of 31 August 2026, Sigstore pricing is free across 2 published tiers. Figures are the vendor's list prices as recorded on this page's last check; the vendor's site is the final word.
- Entry price
- Free
- Model
- Open source, public instance free to use
- Tiers
- 2
- Free tier
- Yes
Sigstore plans, side by side
Every published tier in ascending order of price, with the number of features each one lists. An absence here means the record does not itemise it, not that the tier lacks it.
| Plan | Price | Features listed | Step up from the tier below |
|---|---|---|---|
| Public good instance | Free | 4 | Entry tier |
| Self-hosted | Free | 4 | +$0/month, 4 more features |
What each tier adds
The set difference between each tier's feature list and the one beneath it. Where a tier lists nothing new, the vendor has either stopped repeating the inherited list or the tier raises limits rather than adding capability, the record does not distinguish the two, so this page does not either.
Public good instance
FreeThe entry tier. It covers free to everyone with no contract, 99.5 percent availability objective, not an agreement, 100kb cap per attestation upload, support is a slack channel and github issues.
Self-hosted
FreeOver Public good instance, this tier adds:
- Apache-2.0
- Run your own Fulcio and Rekor
- Rekor v2 available for self-hosters
- Infrastructure and operation are yours
Where Sigstore stops being free
Public good instance, Free
- Free to everyone with no contract
- 99.5 percent availability objective, not an agreement
- 100KB cap per attestation upload
- Support is a Slack channel and GitHub issues
No paid tier on record
Sigstore lists a free tier and no priced tier above it in the record we hold.
What the product covers
The full Sigstore feature record, grouped as the catalogue groups it. This is the product as a whole; the record does not map every feature onto a specific tier.
Other
- Fulcio
- Rekor
- Keyless signing
- Multi-language clients
- Timestamp authority
- Neutral governance
People bring Sigstore in for open source projects signing releases without running a certificate authority, organisations meeting a signed-artifact requirement without buying a signing product, publishing provenance that a consumer can verify independently of you, self-hosting the same components where a public log is unacceptable. If that is not the job you are buying for, the alternatives to Sigstore are worth a look before you commit to a tier.
How that compares in Cybersecurity
Too few cybersecurity tools in this directory publish a starting price to quote a meaningful median, so the table below is a like-for-like list rather than a ranking.
| Tool | Entry price | Model | Rated | Head to head |
|---|---|---|---|---|
| Sigstore (this page) | Free | Open source, public instance free to use | - | |
| Hanwha Vision | On request | One-time purchase | - | vs Sigstore |
| BeyondTrust | On request | quote | - | vs Sigstore |
| Feedzai | On request | quote | - | vs Sigstore |
| IDnow | On request | quote | - | vs Sigstore |
| Eagle Eye Networks | On request | Per camera per month | - | vs Sigstore |
| iDenfy | On request | Per verification | - | vs Sigstore |
Ratings are aggregated from third-party sources and imported with each catalogue entry, they are not reviews hosted on Softwr. How each figure is used is set out on the Sigstore badges page.
Before you pay for Sigstore
Three things this page cannot tell you, and all three change the bill. The record carries a price and a billing period but not the unit - per-seat and flat-rate pricing are indistinguishable in this data, so a five-person team may be looking at five times the figure above. It carries no annual rate, so any discount for paying yearly is not something this page can quote. And it carries no trial length.
What it can tell you is the shape of the ladder: 2 tiers between Free and Free, with the jump itemised above. Because there is a free tier, the cheapest way to answer the rest is to use it before paying anything.
Sigstore runs on web, linux, macos, windows, self-hosted, and is published by Open Source Security Foundation, Linux Foundation of Linux Foundation project, distributed. The full record is on the Sigstore review, and the rest of the category is under best cybersecurity tools.
Sigstore pricing questions
- How much does Sigstore cost?
- Sigstore publishes 2 tiers, from Free for Public good instance up to Free for Self-hosted. The entry tier costs nothing.
- Does Sigstore have a free plan?
- Yes. The Public good instance tier costs nothing and covers free to everyone with no contract, 99.5 percent availability objective, not an agreement, 100kb cap per attestation upload.
- What is the difference between Public good instance and Self-hosted on Sigstore?
- Self-hosted costs Free against Free, and adds apache-2.0, run your own fulcio and rekor, rekor v2 available for self-hosters, infrastructure and operation are yours.
- Which cybersecurity tools can I use without paying?
- 1 of the 8 cybersecurity tools listed alongside Sigstore have a free tier: Google Authenticator.
- What am I actually paying for with Sigstore?
- The record lists 6 features across 1 area: other. In practice it is brought in for open source projects signing releases without running a certificate authority, organisations meeting a signed-artifact requirement without buying a signing product, publishing provenance that a consumer can verify independently of you.
- Does Sigstore charge per user?
- The record carries a price and a billing period for each of its 2 tiers, but not the unit that price is charged in. Per-seat and flat-rate billing look identical in this data, so check the vendor's page before budgeting for a team.
- Are these Sigstore prices current?
- They are what the catalogue entry holds, refreshed when the entry is. Vendors change pricing without notice and nobody at Softwr re-verifies each tier by hand, so treat this as a structured summary and the vendor's own pricing page as the authority.
- What should I compare Sigstore against before paying?
- The closest cybersecurity tools in this directory are Hanwha Vision, BeyondTrust, Feedzai, IDnow. Each has a side-by-side comparison with Sigstore covering price, platforms and features.