- Home
- Software Supply Chain Security Software
- Determinate Systems
Determinate Systems
Pittsfield, Massachusetts, United States
What it is
Determinate Systems provides an end-to-end Nix toolchain for installation, collaboration, and deployment across developer laptops, CI, cloud infrastructure, and edge devices. The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages. Determinate Nix is a validated Nix distribution with lazy trees, parallel evaluation, stable flakes enabled by default, and a native Linux builder for macOS. FlakeHub offers binary caching, private flakes, organization access controls, semantic versioning, and authentication integrations including GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud. Its fh apply command can deploy NixOS, Home Manager, and nix-darwin configurations without local Nix evaluation. Secure Packages provides curated, cryptographically signed packages, SBOM generation, policy checks, and vulnerability scanning. The maker says critical vulnerabilities are patched within seven days, distributions receive at least 12 months of support, and one in four receives 60 months. A free plan is listed for macOS, Linux, Windows, and web.
For and against
For
- End-to-end Nix installation and deployment toolchain
- Free plan is available
- Binary caching and private flakes
- SBOM, policy, and vulnerability tools
- FedRAMP High and SOC 2 Type II claims
Against
- Custom development is not included
- Some package support depends on distribution
- Enterprise support is a separate offering
The verdict
Determinate Systems combines Nix tooling with hosted collaboration and supported package security features. Its free plan provides an entry point, while enterprise capabilities and custom work require closer review of support needs.
Who it suits
It suits engineering teams using Nix across laptops, CI, cloud, or edge devices, especially organizations with demanding security requirements. Individual users can also follow the maker’s getting-started guide.
On the record
- Authentication integrations
- FlakeHub supports authentication with GitHub, Microsoft Entra, and Okta, and accepts JWTs from GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud.determinate.systems · read 30 Sep 2026
- Company origin
- Determinate Systems was founded by Eelco Dolstra, creator of Nix, and Graham Christensen, a long-time Nix community leader and systems engineer.determinate.systems · read 30 Sep 2026
- Compliance
- The maker says FlakeHub is FedRAMP High authorized and its package builds use SOC 2 Type II infrastructure.determinate.systems · read 30 Sep 2026
- Configuration deployment
- FlakeHub's fh apply can deploy NixOS, Home Manager, and nix-darwin configurations without local Nix evaluation.determinate.systems · read 30 Sep 2026
- Core products
- The platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages.determinate.systems · read 30 Sep 2026
- CVE remediation
- The Secure Packages page says critical vulnerabilities are patched within 7 days of disclosure.determinate.systems · read 30 Sep 2026
- Determinate Nix
- Determinate Nix is a validated distribution of Nix with parallel evaluation, lazy trees, stable flakes enabled by default, and a native Linux builder for macOS.determinate.systems · read 30 Sep 2026
- Enterprise support
- Enterprise Nix Support includes a dedicated Slack channel, critical-issue investigation within one business hour, and a fix or mitigation target within five business days.determinate.systems · read 30 Sep 2026
- FlakeHub
- FlakeHub provides binary caching, private flakes, organization access controls, and semantic versioning for Nix flakes.determinate.systems · read 30 Sep 2026
- Integrations
- FlakeHub documents authentication with GitHub, GitLab, Semaphore, Buildkite, AWS STS, and Google Cloud, and identity-provider support for GitHub, Microsoft Entra, and Okta.determinate.systems · read 30 Sep 2026
- Intended customers
- The company describes Determinate as Nix for work and organizations with demanding security requirements, while also providing an individual getting-started guide.docs.determinate.systems · read 30 Sep 2026
- Nix distribution
- Determinate Nix is a validated downstream distribution with lazy trees, parallel evaluation, stable flakes enabled by default, and a native Linux builder for macOS.determinate.systems · read 30 Sep 2026
- Package support
- Each distribution is supported for at least 12 months, and one in four is an LTS distribution with 60 months of support.determinate.systems · read 30 Sep 2026
- Package support limits
- Each versioned distribution is supported for at least 12 months, and one in every four distributions is an LTS distribution with 60 months of support.determinate.systems · read 30 Sep 2026
- Platform components
- The Determinate platform combines Determinate Nix, FlakeHub, and Determinate Secure Packages.determinate.systems · read 30 Sep 2026
- Platform support
- Determinate is available for macOS, most Linux systems, and Windows Subsystem for Linux; the maker also documents NixOS installation.docs.determinate.systems · read 30 Sep 2026
- Product
- Determinate is an end-to-end Nix toolchain spanning installation, collaboration, and deployment.docs.determinate.systems · read 30 Sep 2026
- Secure packages
- Determinate Secure Packages is a commercially supported drop-in replacement for Nixpkgs with a curated package set and cryptographic signing.determinate.systems · read 30 Sep 2026
