This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

CodeLocker

Paid#14 of 28 in Code Signing Software

CodeLocker: A broad signing and provenance platform for regulated software teams. Ranked #14 of 28 in Code Signing Software by our editors (7.7/10); pricing: Pricing on request; best for source-to-binary provenance signing.

7.7/10Editor score

Visit CodeLocker

CodeLocker7.7 Visit CodeLocker

At a glance

Editor score
7.7 / 10
Pricing
Pricing on request
Best for
Source-to-binary provenance signing
Supported targets
source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts
Founded
2005 · Fairfax, Virginia, USA
Facts checked
20 Sep 2026

Where it wins
- Signs commits, source code, binaries, scripts, SBOMs, and artifacts
- Connects signing with CI/CD, repositories, build servers, and identity systems
- Supports centralized key management and FIPS 140-3 Level 3 HSM compatibility
Where it doesn't
- Pricing requires a sales conversation
- Its governance scope may exceed basic binary-signing needs
- Broader workflows require more process than signing alone

Our verdict on CodeLocker

CodeLocker is a code-signing and attestation platform from Zeva Inc. for organizations that need software provenance across development and delivery. It supports federal agencies, prime contractors, enterprises, and regulated sectors including defense, healthcare, device manufacturing, and finance. The platform covers commit-level signing, source-code verification, binary signing, scripts, files, software artifacts, and SBOMs, giving teams a way to connect source changes with released software.

CodeLocker's ecosystem fit centers on the software delivery chain. It integrates with source-control repositories, build servers, CI/CD platforms, and identity management systems. Automated validation workflows, CI/CD pipeline integration, audit trails, and provenance tracking extend signing beyond a single release step. Centralized code-signing key management and compatibility with FIPS 140-3 Level 3 HSMs address teams that need controlled protection for signing keys and traceable software operations.

The standout is breadth: CodeLocker brings commit signing, source verification, binary signing, SBOM signing and attestation, and long-term validation signatures into one governance-oriented platform. Pricing follows a contact-sales model, with the vendor directing prospective customers to book a demo or call. It is a strong fit for teams that need source-to-binary traceability, formal validation workflows, and supply-chain oversight. Teams seeking only a straightforward binary-signing utility may prefer a narrower product with less emphasis on provenance, attestation, and centralized governance.

Your product? Our editors can test CodeLocker in depth and publish a review, labelled as paid · from $149/mo →

CodeLocker pricing

Plans Pricing on requestPaid No free plan — trial or paid only. Prices checked 20 Sep 2026.

See plans on codelocker.zevainc.com

CodeLocker fact sheet

Free plan	Not verified
Paid from	Not verified
Supported targets	source-code commits; source code; files; binaries; scripts; SBOMs; software artifacts
Certificate provided	Not verified
Cloud signing	Not verified
HSM key protection	Yes
Trusted timestamping	Not verified
CI/CD signing	Yes
Approval workflows	Not verified
Built for	Mid-market, Enterprise (editorial estimate)
Integrations	4 integrations: source-control repositories, build servers, CI/CD platforms, identity management systems
Pricing	Pricing on request
Website	codelocker.zevainc.com
Facts checked	20 Sep 2026

CodeLocker integrations

CodeLocker lists 4 integrations on its own site.

source-control repositories
build servers
CI/CD platforms
identity management systems

Alternatives to CodeLocker

See all CodeLocker alternatives →

Used CodeLocker? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used CodeLocker for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used CodeLocker myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

CodeLocker is listed in our Code Signing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/codelocker/"><img src="https://www.itechguides.com/best/badge/codelocker.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update