ReARM review
A release governance platform combining SBOM oversight, policy checks, approvals, and delivery history.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
ReARM is a release governance platform for technical and compliance teams managing software supply chains. It organizes releases, components, SBOMs, and other evidence, then applies configurable release policies and approval workflows before recording what shipped. Its scope also includes vulnerability and policy-violation aggregation, release notifications, environment tracking, audit trails, and AI governance for agent-written code. ReARM fits organizations that need release security and SBOM governance alongside release coordination rather than a narrow deployment tool.
The pricing structure covers both open-source and commercial use. ReARM CE is a FOSS Community Edition that is self-hosted and includes core SBOM/XBOM storage and retrieval with community support. ReARM Pro Starter costs $195 per month and adds up to 65GB of compressed artifact storage, priority support, Managed Dependency-Track, approvals and event workflows, and SBOM enrichment through BEAR. Standard costs $1,350 per month and adds unlimited artifact storage, a private VPC/VNet with SSO, an option for on-premises deployment, and 24x7 enhanced support. Enterprise is priced at $75 per user per month and adds 24x7 premium support plus an air-gapped deployment option. A 60-day trial is also available.
ReARM’s ecosystem fit is a central strength. Teams can connect GitHub Actions, GitLab, Azure DevOps, Jenkins, Slack, Microsoft Teams, Microsoft Sentinel, Dependency-Track, Microsoft Azure, and the ReARM CLI across web, API, and self-hosted deployments. That combination gives release and compliance processes a shared record of components, evidence, approvals, and policy outcomes. Choose ReARM when software supply-chain evidence and controlled release decisions are priorities. Organizations seeking a simpler release tracker, or those that do not need SBOM/XBOM governance, may find its policy, workflow, and deployment model broader than necessary.
ReARM pros and cons
- Where it wins
- Open-source self-hosted Community Edition with core SBOM/XBOM storage
- Approval workflows, policy checks, and release security posture controls
- Integrations for GitHub Actions, GitLab, Jenkins, Azure DevOps, and more
- Where it doesn't
- Starter limits compressed artifact storage to 65GB
- Standard costs $1,350 per month
- Community Edition is self-hosted with community support
ReARM fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update