- Home
- Container Image Scanning Tools
- Anchore Enterprise
Anchore Enterprise
Santa Barbara, California, United States
What it is
Anchore Enterprise is an SBOM-powered platform for continuous software supply-chain security and compliance. It generates software bills of materials for containers, source code, and filesystems in Syft, CycloneDX, and SPDX formats, then scans them for vulnerabilities, secrets, and malware. Policy packs cover NIST, FedRAMP, and DISA, while policy-as-code rules use JSON and can be version controlled in Git. The platform inventories running images across EKS, ECS, AKE, GKE, and OpenShift clusters. Listed integrations include Bitbucket, Bamboo, Amazon ECR and EKS, Azure DevOps and ACR, CircleCI, Jenkins, GitHub Actions, GitLab CI, Docker Hub, and Harbor. Deployment options include an AWS machine image or Helm-installed container images on Kubernetes-compatible platforms. Anchore says every feature can be accessed through its API and supports air-gapped environments. It is available for web, Linux, API, and self-hosted use. Pricing is on request; there is no free plan, but a free trial is available.
For and against
For
- Generates SBOMs in three listed formats
- Scans for vulnerabilities, secrets, and malware
- Policy packs support NIST, FedRAMP, and DISA
- Can inventory images across major clusters
- Air-gapped deployment is available
Against
- No free plan
- Pricing is available on request
- Commercial tiers limit monthly SBOM volumes
- Government and commercial tiers differ
The verdict
Anchore Enterprise combines SBOM generation, continuous scanning, compliance policies, runtime inventory, and API access. Buyers should match their deployment model and monthly SBOM needs to the available tier limits.
Who it suits
Anchore describes the product for large enterprises and government agencies handling software composition analysis, SBOM management, vulnerability scanning, and compliance enforcement. It suits teams needing air-gapped deployment, policy controls, or broad ecosystem coverage.
Plans and prices
Commercial Cloud Image
Core or Enhanced tier; SBOM limits not specified in opened page
Read 9 Oct 2026 · anchore.com
Commercial Container Image
Pro or Advanced tier; 500–4,000 SBOMs/month depending on tier
Read 9 Oct 2026 · anchore.com
Government Cloud Image
Basic or Premium tier; 1,000–3,000 SBOMs/month
Read 9 Oct 2026 · anchore.com
Government Container Image
Ultimate tier; 4,000 SBOMs/month
Read 9 Oct 2026 · anchore.com
On the record
- Air-gapped use
- Anchore says it can be deployed in air-gapped environments for classified or restricted-access settings.anchore.com · read 9 Oct 2026
- API
- The maker says every feature and operation can be instrumented through an API, and the pricing page states all tiers include full API access.anchore.com · read 9 Oct 2026
- Audience
- Anchore describes its users as large enterprises and government agencies using software composition analysis, SBOM management, vulnerability scanning, and compliance enforcement.anchore.com · read 9 Oct 2026
- Compliance
- It offers policy packs for NIST, FedRAMP, and DISA and supports policy as code in JSON instructions that can be version controlled in Git.anchore.com · read 9 Oct 2026
- Deployment
- Anchore Enterprise is offered as an AWS machine image or as container images installable with Helm on Kubernetes-compatible platforms.anchore.com · read 9 Oct 2026
- Free trial
- The maker offers a self-hosted evaluation and says an Anchore expert will guide users after they request a free trial; no trial duration is stated.go.anchore.com · read 9 Oct 2026
- Integrations
- The maker lists integrations including Atlassian Bitbucket Pipes and Bamboo, Amazon ECR and EKS, Azure DevOps and ACR, CircleCI, Jenkins, GitHub Actions, GitLab CI, Docker Hub, and Harbor.anchore.com · read 9 Oct 2026
- Limits
- Commercial tiers list SBOM limits of 500, 3,000, 2,000, or 4,000 per month, while government tiers list 1,000, 3,000, or 4,000 per month.anchore.com · read 9 Oct 2026
- Purpose
- Anchore Enterprise is an SBOM-powered platform for continuous software supply chain security and compliance.anchore.com · read 9 Oct 2026
- Runtime inventory
- It can inventory running images across EKS, ECS, AKE, GKE, and OpenShift clusters.anchore.com · read 9 Oct 2026
- SBOM management
- It generates SBOMs for containers, source code, and filesystems and supports Syft, CycloneDX, and SPDX formats.anchore.com · read 9 Oct 2026
- Security reporting
- Anchore publishes a vulnerability disclosure policy covering its digital assets and says it will respond promptly and work toward timely remediation.anchore.com · read 9 Oct 2026
- Security scanning
- It continuously scans SBOMs for vulnerabilities, secrets, and malware.anchore.com · read 9 Oct 2026
- Support
- The pricing page lists Basic support with a 9×5 SLA, setup and configuration guidance, and expert office hours; paid support tiers add 24×7 priority SLA and other services.anchore.com · read 9 Oct 2026
