The Best Code Signing Software in 2026
We researched code signing software from official websites, including pricing pages, plan tables, and product documentation. Rankings reflect each product’s core signing workflows, value for money, and verified features for teams securing software, firmware, packages, and release artifacts.
Our top picks
-
Top ranked
SignPath#1 of 289.4/10Governed signing for teams shipping software across diverse artifact formats.
Free plan
-
Runner-up
DigiCert Software Trust Manager#2 of 289.2/10Enterprise signing governance for artifacts, approvals, keys, and release pipelines.
Pricing on request · 30-day trial
-
Top-ranked free plan
SignServer#3 of 289.0/10A flexible open-source signing server with enterprise controls for production deployments.
Free plan · 30-day trial
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
The full ranking 28 tools, best first
-
Best forTeams needing governed multi-format signing
Governed signing for teams shipping software across diverse artifact formats.
- Approval workflows
- Trusted timestamping
- Certificate provided
9.4/10★★★★★Visit SignPath -
Best forEnterprise-wide signing and certificate governance
Enterprise signing governance for artifacts, approvals, keys, and release pipelines.
- Approval workflows
- Trusted timestamping
- Certificate provided
Pricing on request · 30-day trial Our DigiCert Software Trust Manager verdict → Visit DigiCertFor vendors Sponsor this spot · #2 · $99/mo →9.2/10★★★★★Visit DigiCert -
Best forOpen-source, broad server-side signing
A flexible open-source signing server with enterprise controls for production deployments.
- Trusted timestamping
- Cloud signing
- HSM key protection
Free plan · 30-day trial Our SignServer verdict → Visit SignServerFor vendors Sponsor this spot · #3 · $79/mo →9.0/10★★★★☆Visit SignServer -
Best forEnterprises automating complex signing pipelines
Enterprise code signing with broad target coverage, approvals, HSM protection, and audit trails.
- Approval workflows
- Cloud signing
- HSM key protection
8.8/10★★★★☆Visit Aujas -
Best forHigh-assurance multi-platform signing
High-assurance signing for teams protecting diverse software artifacts and release pipelines.
- Approval workflows
- Cloud signing
- HSM key protection
8.7/10★★★★☆Visit GaraTrust -
Best forEligible open-source projects
A free, policy-driven signing service for qualifying open-source projects.
- Approval workflows
- Trusted timestamping
- Certificate provided
8.6/10★★★★☆Visit SignPath -
Best forMicrosoft-centric teams needing managed signing
A managed signing service for Microsoft-focused teams, with Basic and Premium plans.
- Trusted timestamping
- Certificate provided
- Cloud signing
8.5/10★★★★☆Visit Microsoft -
Best forOpen-source artifact and container signing
A free, open-source choice for keyless artifact, container, SBOM, and provenance signing.
8.4/10★★★★☆Visit Sigstore -
Best forContainer and cloud-native artifact signing
A flexible open-source choice for signing cloud-native artifacts across modern registries and CI pipelines.
- Trusted timestamping
- Certificate provided
- HSM key protection
8.3/10★★★★☆Visit Cosign -
Best forTeams buying certificates with cloud HSM signing
A cloud HSM signing service with strong CI/CD coverage and separate certificate costs.
- Trusted timestamping
- Certificate provided
- Cloud signing
8.2/10★★★★☆Visit SSL.com -
Best forBudget-conscious remote cloud signing
A cloud signing service with HSM key storage, CI/CD integrations, and annual quotas.
- Certificate provided
- Cloud signing
- HSM key protection
8.1/10★★★★☆Visit sslTrus -
Best forManaged Authenticode signing with strong controls
A controlled Authenticode signing platform for organizations with governed release processes.
- Approval workflows
- Trusted timestamping
- Certificate provided
Pricing on request Our ComSignTrust Secure Code Signing Platform (ASCS) verdict → Visit ComSignTrust8.0/10★★★★☆Visit ComSignTrust -
Best forEnterprises governing self-hosted signing keys and use
A self-hosted option for governing signing keys, applications, projects, and approvals.
- Approval workflows
- HSM key protection
7.8/10★★★★☆Visit CyberArk -
Best forSource-to-binary provenance signing
A broad signing and provenance platform for regulated software teams.
- HSM key protection
- CI/CD signing
7.7/10★★★★☆Visit CodeLocker -
Best forFirmware and secure-boot signing programs
A broad signing platform for firmware, secure boot, OTA updates, and device identity.
- Approval workflows
- Trusted timestamping
- Certificate provided
7.6/10★★★★☆Visit LAAVAT -
Best forOCI and SBOM signing in DevOps workflows
A focused open-source choice for OCI, SBOM, and DevOps signing workflows.
- Trusted timestamping
- Cloud signing
- CI/CD signing
7.4/10★★★★☆Visit Notation -
Best forSecuring software-update repositories
A strong fit for update repositories, but not a hosted code-signing certificate service.
- Approval workflows
- Cloud signing
- HSM key protection
7.3/10★★★★☆Visit site -
Best forWindows developers wanting low-cost signing
Low-cost Windows signing with scanning, automation, and installer tools.
- Approval workflows
- Certificate provided
- Cloud signing
7.2/10★★★★☆Visit Bamboo Deploy -
Best forSecure firmware and software-image signing
A specialized self-hosted server for protected firmware and software-image signing.
- HSM key protection
- CI/CD signing
7.1/10★★★★☆Visit BlackBerry -
Best forFree keyless Git commit signing
A focused open-source option for keyless Git commit and tag signing.
- Trusted timestamping
- Certificate provided
- CI/CD signing
7.0/10★★★★☆Visit Gitsign -
Best forWindows teams wanting a one-time purchase
A Windows-focused, one-time purchase server for centralized code signing.
- Trusted timestamping
- Certificate provided
- HSM key protection
6.9/10★★★☆☆Visit Signotaur -
Best forHigh-volume cloud certificate signing
A high-volume cloud signing option with broad artifact and CI/CD support.
- Certificate provided
- Cloud signing
- CI/CD signing
6.8/10★★★☆☆Visit GoGetSSL -
Best forAWS workloads and container pipelines
A focused managed signing service for AWS Lambda, IoT firmware, and OCI container pipelines.
- Certificate provided
- Cloud signing
6.7/10★★★☆☆Visit AWS Signer -
Best forCross-platform software and AAX signing
A broad signing platform for software publishers supporting cloud, USB, CI, and AAX workflows.
- Certificate provided
- Cloud signing
- CI/CD signing
6.6/10★★★☆☆Visit PACE -
Best forSelf-hosted API signing for small teams
A focused open-source API signer for Linux teams using hardware-backed keys.
- HSM key protection
- CI/CD signing
6.5/10★★★☆☆Visit Signo -
Best forIdentity-bound signing for messages and artifacts
A focused protocol for binding signing keys to OIDC identities across messages and artifacts.
6.3/10★★★☆☆Visit OpenPubkey -
Best forRed Hat environments signing build artifacts
A broad code-signing platform for Red Hat environments and software supply chains.
- Trusted timestamping
- Certificate provided
- CI/CD signing
6.2/10★★★☆☆Visit Red Hat -
Best forCertificate lifecycle teams with adjacent signing needs
A broad certificate management platform, but not a code-signing-focused product.
6.2/10★★★☆☆Visit Keyfactor
No tools match those filters.
Compare at a glance
| # | Tool | Free plan | Paid from | Supported targets | Cloud signing | HSM key protection | CI/CD signing | Score |
|---|---|---|---|---|---|---|---|---|
| 1 | SignPath | Yes | Free | Windows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifacts | Yes | Yes | Yes | 9.4 |
| 2 | DigiCert Software Trust Manager | Windows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifacts | Yes | Yes | Yes | 9.2 | ||
| 3 | SignServer | Yes | Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports | Yes | Yes | Yes | 9.0 | |
| 4 | Aujas Automated Code Signing Platform | Windows files; Java JAR/WAR/EAR/HPI; Android APK; RPM; Linux files; Docker images; iOS/macOS DMG, IPA, PKG, APP; XAR; MAGE manifests; WHQL/HLK drivers; VSIX; DLL, EXE, JS, SYS, MSI, VBS, MSP, OCX, PS1, WSF, CAB; Debian packages; Helm charts | Yes | Yes | Yes | 8.8 | ||
| 5 | GaraTrust | Windows Authenticode, Kernel/WHQL, MSI/MSIX, NuGet, PowerShell, ClickOnce, macOS, iOS, Android APK/AAB, Java JAR, Docker, Notary v2, Linux RPM, DEB, GPG, firmware/UEFI, PDF, XML/XAdES, SBOM | Yes | Yes | Yes | 8.7 | ||
| 6 | SignPath Foundation | Yes | Free | Windows executables and scripts, MSI, CAB, AppX/MSIX, NuGet, Java archives, Android packages, RPM, Debian packages, Office macros, XML, JSON, OCI container images, ClickOnce, and arbitrary files | Yes | Yes | Yes | 8.6 |
| 7 | Azure Artifact Signing | No | $9.99/mo | Win32 applications, PE binaries, VBS enclaves, CI policy files, internal/private artifacts, containers, and SignTool-supported file types | Yes | Yes | Yes | 8.5 |
| 8 | Sigstore | Yes | Free | 8.4 | ||||
| 9 | Cosign | Free | OCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestations | Yes | Yes | 8.3 | ||
| 10 | SSL.com eSigner for Code | No | Windows executables, drivers, installers, scripts, .exe, .dll, .msi, .cab, .sys, .ps1, Java code objects | Yes | Yes | Yes | 8.2 | |
| 11 | sslTrus Remote Code Signing Service | No | $75/yr | Adobe AIR applications, Firefox XPI extensions, macOS applications, Java JAR files, Microsoft Authenticode formats (.exe, .dll, .ocx, .msi, .cab and kernel drivers), Microsoft Office macro/VBA files, and Silverlight XAP files | Yes | Yes | Yes | 8.1 |
| 12 | ComSignTrust Secure Code Signing Platform (ASCS) | CAB, COS, EXE, DLL and other Microsoft Authenticode files | Yes | Yes | Yes | 8.0 | ||
| 13 | CyberArk Code Sign Manager - Self-Hosted | Code-signing keys and artifacts handled by integrated signing applications; specific target formats not confirmed | No | Yes | 7.8 | |||
| 14 | CodeLocker | source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts | Yes | Yes | 7.7 | |||
| 15 | LAAVAT PKI and Signing Platform | No | NXP HAB/AHAB, AMD/Xilinx Bootgen, TI, MCUboot, FIT, RAUC, SWUpdate, Mender, OP-TEE, OCI/Cosign, Windows, Java, JWT, detached signatures | Yes | Yes | Yes | 7.6 | |
| 16 | Notation | Free | OCI container images and other OCI artifacts, including SBOMs | Yes | Yes | 7.4 | ||
| 17 | The Update Framework | Yes | Free | Software updates, repository target files, packages, and digital artifacts | Yes | Yes | Yes | 7.3 |
| 18 | Bamboo Deploy | Yes | $15/mo | EXE, MSI, DLL | Yes | Yes | 7.2 | |
| 19 | Code Signing Key Management Server (CSKMS) | firmware, software applications, software images, block images, hash fingerprints | Yes | Yes | 7.1 | |||
| 20 | Gitsign | Yes | Free | Git commits; Git tags | No | Yes | 7.0 | |
| 21 | Signotaur | No | $199 one-time | Windows executables and installers, PowerShell scripts, AppX/MSIX, NuGet packages, VSIX packages, ClickOnce/VSTO manifests, RDP files, Apple configuration and provisioning profiles, CMS/PKCS#7 files, archives, PDF and XML documents | No | Yes | Yes | 6.9 |
| 22 | GoGetSSL Cloud Code Signing | No | $425/yr | Adobe AIR applications; Mozilla object files; Apple Mac software; Java JAR applets; Microsoft Authenticode files including DLL, OCX, EXE, MSI, CAB and kernel software; Microsoft Office VBA files; Microsoft Silverlight applications | Yes | No | Yes | 6.8 |
| 23 | AWS Signer | AWS Lambda deployment packages; IoT and FreeRTOS firmware images; OCI container images | Yes | 6.7 | ||||
| 24 | PACE Code Signing Platform | Windows, macOS, Linux, IoT binaries, AAX plug-ins | Yes | Yes | 6.6 | |||
| 25 | Signo | Free | Files; Windows executables via Authenticode | Yes | Yes | 6.5 | ||
| 26 | OpenPubkey | Yes | Free | messages and artifacts | 6.3 | |||
| 27 | Red Hat Trusted Artifact Signer | container images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML models | Yes | 6.2 | ||||
| 28 | Keyfactor Platform | 6.2 |
Head-to-head All 28 comparisons →
- SignPath vs DigiCert Software Trust Manager
- SignPath vs SignServer
- SignPath vs Aujas Automated Code Signing Platform
- SignPath vs GaraTrust
- SignPath vs SignPath Foundation
- SignPath vs Azure Artifact Signing
- SignPath vs Sigstore
- DigiCert Software Trust Manager vs SignServer
- DigiCert Software Trust Manager vs Aujas Automated Code Signing Platform
Explore other topics All topics →
- AI Tools 303 directories · 8,269 tools ranked AI Writing Tools · AI Video Generators · Text-to-Speech Software
- Web Hosting & Domains 275 directories · 6,107 tools ranked Shared Web Hosting · Managed Cloud Hosting · Dedicated Server Hosting
- Productivity 157 directories · 4,948 tools ranked Note-Taking Apps · Calendar Apps · Project Management Software
- Marketing 135 directories · 3,977 tools ranked SEO Tools · Influencer Marketing Platforms · Email Marketing Software
- Sales & CRM 152 directories · 4,161 tools ranked Real Estate CRM Software · CRM Software · Proposal Software
- Customer Service 55 directories · 1,547 tools ranked Chatbot Builders · Knowledge Base Software · Call Center Software
How we rank code signing software
Every tool on this page was researched by iTechGuides Editors from its official website — pricing pages, plan tables and product documentation. We rank on how well each one does this category's core job, what the free or entry plan includes, and where it falls short. Where we have enough verified facts, the score out of 10 is a rubric — job fit, value and how much we could verify — shown with its breakdown on every tool's page; a tool we have not verified enough to score yet shows its rank without a number. Scores are re-checked when a product changes its plans. Read the full editorial policy, or submit a tool we missed.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Last updated · How we research and update