OrbitalReg

Plans and prices

Every plan, in full

On the record

Air-gap deployment

Air-gap mode denies outbound traffic and supports vendored CVE feeds and signed update bundles delivered out of band.orbitalreg.com · read 8 Oct 2026

CI integrations

The product says GitHub Actions, GitLab CI, and Jenkins integrate natively, and also names Tekton as a CI source.orbitalreg.com · read 8 Oct 2026

Company

The site says OrbitalReg was established in 2024 and is made in Germany; it describes the product as hosted in Frankfurt.orbitalreg.com · read 8 Oct 2026

Compliance

SOC 2 Type II is in pre-audit, ISO 27001 controls are mapped to product features, and the company says it is GDPR-compliant with EU-only data residency.orbitalreg.com · read 8 Oct 2026

Deployment

The registry runs as one Go binary with Postgres and S3-compatible storage on premises, in a customer cloud account, or offline.orbitalreg.com · read 8 Oct 2026

Encryption

The security page states that in-transit traffic uses TLS 1.3 and provides operator-controlled at-rest encryption recipes.orbitalreg.com · read 8 Oct 2026

Identity

Authentication options include SAML 2.0 and OIDC for the admin interface, plus scoped token authentication for the artifact API.orbitalreg.com · read 8 Oct 2026

Intended customers

The maker describes it for regulated industries, defence, finance, public sector, and operators seeking control over their infrastructure and data.orbitalreg.com · read 8 Oct 2026

Migration

A migration CLI imports from Artifactory, Nexus, GitHub Packages, GitLab, and cloud registries.orbitalreg.com · read 8 Oct 2026

Package formats

It supports 40+ package formats through one API surface, including Maven, npm, PyPI, Docker, Helm, Cargo, NuGet, and Terraform providers.orbitalreg.com · read 8 Oct 2026

Product

OrbitalReg is a self-hosted artifact repository for teams that need to manage software packages and build artifacts on their own hardware.orbitalreg.com · read 8 Oct 2026

Pull verification

Per-repository verify-on-pull policies can block artifacts that lack cryptographic signatures, including CMS, OpenPGP, RSA, and Sigstore signatures.orbitalreg.com · read 8 Oct 2026

Scanning

Trivy and Grype scan artifacts at upload and on demand, with results kept on customer hardware.orbitalreg.com · read 8 Oct 2026

Support

The Commercial plan includes email support during business hours; the Long-term Partner plan offers 24/7 support as an optional add-on.orbitalreg.com · read 8 Oct 2026

Alternatives to OrbitalReg

N NexspenceWebWindows+4 P PackagecloudWebWindows+4 G GemfuryWebWindows+3 IP Inedo ProGetWebWindows+3 SN Sonatype Nexus RepositoryWebWindows+4 B BuildstashAndroidiPhone & iPad+6 OL Omni Line Multipurpose Artifact RegistryWebLinux+2 R RavenstashWebWindows+3

Every alternative, ranked