Signo
Signo: A focused open-source API signer for Linux teams using hardware-backed keys. Ranked #25 of 28 in Code Signing Software by our editors (6.5/10); pricing: Open source; best for self-hosted API signing for small teams.
At a glance
- Editor score6.5 / 10
- PricingOpen source
- Best forSelf-hosted API signing for small teams
- Paid fromFree
- Supported targetsFiles; Windows executables via Authenticode
- Facts checked20 Sep 2026
Where it wins
- Signs files and Windows executables through an HTTP API
- Supports PKCS#11 token detection, management, and visibility
- Handles multiple users, API signees, and CI/CD signing workflows
Where it doesn't
- Runs on Linux rather than offering broad platform coverage
- Requires self-hosting and operational ownership
- Signing support is focused on files and Windows executables
Our verdict on Signo
Signo is an open-source, self-hosted Node.js service for teams that need API-driven code signing on a Linux machine. It supports plain file signing and Authenticode signing for Windows executables, making it suited to small teams automating signing workflows or incorporating hardware-backed keys into CI/CD processes. Administrators can manage multiple users and API signees while controlling access to the signing service through HMAC-signed API requests.
Its main distinction is the combination of HTTP signing and PKCS#11 support. Signo can detect and manage PKCS#11 tokens, expose hardware-token key and certificate information, and use configurable signing engines. The published configuration supports either SQLite or MySQL, while installation is available through npm or Docker. This gives teams a self-hosted deployment path with a focused feature set for connecting automated workflows to protected signing hardware.
Signo uses an open-source model rather than a tiered SaaS plan, so its appeal is strongest for teams prepared to operate the service themselves. It is a practical fit when Linux hosting, API access, HMAC authentication, PKCS#11 token management, and Authenticode signing cover the requirement. Teams seeking broader target coverage, a managed service, or a wider platform ecosystem should choose a product designed around those needs instead. Signo is most compelling when control over deployment and hardware-backed signing matter more than breadth.
Your product? Our editors can test Signo in depth and publish a review, labelled as paid · from $149/mo →
Signo pricing
Signo fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Free |
| Supported targets | Files; Windows executables via Authenticode |
| Certificate provided | Not verified |
| Cloud signing | Not verified |
| HSM key protection | Yes |
| Trusted timestamping | Not verified |
| CI/CD signing | Yes |
| Approval workflows | Not verified |
| Deployment | Self-hosted |
| Platforms | Linux |
| Support | Docs |
| Built for | Small business, Mid-market (editorial estimate) |
| Pricing | Open source |
| Website | github.com |
| Facts checked | 20 Sep 2026 |
Alternatives to Signo
- SignPathGoverned signing for teams shipping software across diverse artifact formats.9.4
- DigiCert Software Trust ManagerEnterprise signing governance for artifacts, approvals, keys, and release pipelines.9.2
- SignServerA flexible open-source signing server with enterprise controls for production deployments.9.0
Used Signo? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Signo for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Signo is listed in our Code Signing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/signo/"><img src="https://www.itechguides.com/best/badge/signo.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update