- Home
- Code Signing Software
- GaraTrust
On the recordRead 8 Oct 202615 facts
GaraTrust
San Diego, California, United States
Plans and prices
GaraTrust
Priced on request
All formats and integrations included · No backward true-ups for exceeding a tier; next-tier pricing applies in the next subscription year
Read 8 Oct 2026 · garantir.io
On the record
- Access controls
- Controls listed for manual production signing include MFA, device authentication, quorum approvals, IP whitelisting, just-in-time access, audit notifications, and granular key permissions.garantir.io · read 8 Oct 2026
- Build verification
- Automated hash validation and reproducible build checks verify that signed code matches source repository code.garantir.io · read 8 Oct 2026
- CI/CD and workstation use
- GaraTrust supports signing from automated CI/CD pipelines and developer workstations using native signing tools.garantir.io · read 8 Oct 2026
- Compliance
- The product page describes SBOM generation, reproducible-build verification, audit logging, and reporting for NIST SSDF, EO 14028, and SLSA.garantir.io · read 8 Oct 2026
- Deployment
- GaraTrust is available as SaaS or on-premises and supports air-gapped and classified environments.garantir.io · read 8 Oct 2026
- HSM integrations
- Named HSM and key-management integrations include Thales, Entrust nShield, AWS CloudHSM, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault.garantir.io · read 8 Oct 2026
- Intended customers
- Garantir describes GaraTrust as serving organizations from small businesses to large enterprises with varied security requirements.garantir.io · read 8 Oct 2026
- Key protection
- Signing keys are stored as non-exportable in FIPS 140-2/3 HSMs and do not leave the hardware.garantir.io · read 8 Oct 2026
- Malware scanning
- Before approving a signature, GaraTrust can run configured static analysis, fuzzing, and malware-scanning tools on source code or binaries.garantir.io · read 8 Oct 2026
- Post-quantum support
- The page describes hybrid RSA/ECC and post-quantum support, including ML-DSA for software and LMS for firmware and hardware roots of trust.garantir.io · read 8 Oct 2026
- Signing formats
- It supports signing for Windows, macOS, iOS, Android, Java, Docker, Linux, GPG, PDF, XML, firmware, and SBOMs.garantir.io · read 8 Oct 2026
- Signing workflow
- The signing client hashes binaries locally and sends only the hash for signing, which the page says completes in milliseconds.garantir.io · read 8 Oct 2026
- Support
- Every subscription includes 24/7/365 enterprise-grade support for production environments.garantir.io · read 8 Oct 2026
- What it does
- GaraTrust provides enterprise code signing for binaries, containers, drivers, and packages using HSM-backed signing.garantir.io · read 8 Oct 2026
