Artifact Keeper review
A free, self-hosted registry with broad format support and detailed repository controls.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Artifact Keeper is an open-source artifact registry for development and DevOps teams that need to store and distribute packages, container images, infrastructure packages, machine-learning models, editor extensions, Git LFS content, and generic build outputs. Its permanently free Open-source plan is MIT licensed, has no per-user fees, and includes all features in the open-source release. Customer-managed deployment is supported through Docker Compose or Kubernetes, with filesystem or S3-compatible storage.
The repository model covers hosted, remote pull-through cache, and virtual repositories, giving teams options for publishing internal artifacts, caching upstream packages, and combining sources. Support for 45+ formats includes Maven, npm, PyPI, NuGet, Docker/OCI, Helm, Terraform, and generic files. Fine-grained permissions provide RBAC, groups, and read, write, delete, and admin access levels. Lifecycle policies can address age, version count, download inactivity, tag patterns, and storage quotas. Full-text search is powered by OpenSearch, while peer replication supports distribution across Artifact Keeper instances.
Security and ecosystem fit are notable parts of the product. Vulnerability scanning integrates with Trivy, OpenSCAP, and OWASP Dependency-Track, and identity options include LDAP, SAML 2.0, and OIDC. PostgreSQL and S3-compatible storage are also supported. GPG and RSA signing apply to selected package formats, while WASM plugins allow custom package format handlers. Migration tooling can import repositories, artifacts, metadata, users, and permissions from Artifactory. Artifact Keeper suits teams that want broad repository capabilities without per-user charges and can manage their own infrastructure. Teams needing native support beyond web and macOS, or a vendor-managed deployment, should consider another repository platform.
Artifact Keeper pros and cons
- Where it wins
- Supports 45+ package formats, including Docker/OCI, Helm, and Terraform
- Includes RBAC, lifecycle policies, replication, search, and vulnerability scanning
- MIT licensed with no per-user fees and all open-source features included
- Where it doesn't
- Platform coverage is limited to web and macOS
- Deployment is customer-managed through Docker Compose or Kubernetes
- Artifact signing is available only for selected package formats
Artifact Keeper fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update