SignServer
SignServer: A flexible open-source signing server with enterprise controls for production deployments. Ranked #3 of 28 in Code Signing Software by our editors (9.0/10); pricing: Free plan · 30-day trial; best for open-source, broad server-side signing.
At a glance
- Editor score9.0 / 10
- PricingFree plan · 30-day trial
- Best forOpen-source, broad server-side signing
- Free planYes
- Supported targetsWindows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports
- Founded2005
- Facts checked20 Sep 2026
Where it wins
- Supports code, firmware, containers, packages, documents, and timestamps
- Works with major signing formats, REST, web, CLI, and client interfaces
- Integrates with HSMs, CI/CD pipelines, Jenkins, and DevOps tools
Where it doesn't
- Community Edition is not intended for production use
- Enterprise governance and scaling features require Enterprise Edition
- Enterprise pricing requires contacting Keyfactor
Our verdict on SignServer
SignServer is server-side software for centrally managed signing across code, firmware, containers, documents, packages, and timestamps. It suits organizations that need one signing service across Windows, macOS, Linux, web, API, or self-hosted environments. Its supported targets include Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports.
The free Community Edition provides open-source software, core signing functionality, and access to source code and containers. It is positioned for testing and prototyping rather than production use. The Enterprise Edition adds production-oriented security and governance, cloud, container, software-appliance, and hardware-appliance deployment options, plus professional support and enterprise SLAs. Enterprise also includes centralized authorization controls, signed audit logs, clustering, failover, and load balancing. A 30-day trial is available through AWS and Azure cloud deployments.
SignServer fits teams with varied signing workflows and existing automation. It supports Microsoft Authenticode, Java, Android, CMS, OpenPGP, Debian, and plain signatures, along with RFC 3161 and Authenticode timestamping. REST, web, command-line, and client interfaces connect it to CI/CD and DevOps workflows, including Jenkins and SignClient. Hardware security module integration, including cloud HSM options, supports protected key management. Choose SignServer when open-source access, broad artifact coverage, and self-hosted or cloud deployment matter. Teams needing production governance, support, or high availability should choose Enterprise rather than Community Edition.
Your product? Our editors can test SignServer in depth and publish a review, labelled as paid · from $149/mo →
SignServer pricing
All 2 SignServer plans and prices →
SignServer fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Supported targets | Windows PE executables, MSI, CAB, APPX/MSIX, PowerShell scripts, Java archives, Android APKs, Debian packages, Git commits, OpenPGP data, CMS/raw data, firmware, containers, documents, and ePassports |
| Certificate provided | Not verified |
| Cloud signing | Yes |
| HSM key protection | Yes |
| Trusted timestamping | Yes |
| CI/CD signing | Yes |
| Approval workflows | Not verified |
| Free trial | 30 days |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Windows, macOS, Linux |
| Support | Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: CI/CD pipeline tools, DevOps tools, REST API, SignClient, Jenkins, Hardware security modules … |
| Pricing | Free plan · 30-day trial (source) |
| Website | signserver.org |
| Facts checked | 20 Sep 2026 |
SignServer integrations
SignServer lists 7 integrations on its own site.
- CI/CD pipeline tools
- DevOps tools
- REST API
- SignClient
- Jenkins
- Hardware security modules
- Identity and authorization platforms
Alternatives to SignServer
- SignPathGoverned signing for teams shipping software across diverse artifact formats.9.4
- DigiCert Software Trust ManagerEnterprise signing governance for artifacts, approvals, keys, and release pipelines.9.2
- Aujas Automated Code Signing PlatformEnterprise code signing with broad target coverage, approvals, HSM protection, and audit trails.8.8
See all SignServer alternatives →
SignServer vs the competition
- SignServer vs SignPath
- SignServer vs DigiCert Software Trust Manager
- SignServer vs Aujas Automated Code Signing Platform
- SignServer vs GaraTrust
- SignServer vs SignPath Foundation
- SignServer vs Azure Artifact Signing
Compare SignServer with any tool side by side →
Used SignServer? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SignServer for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
SignServer is listed in our Code Signing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/signserver/"><img src="https://www.itechguides.com/best/badge/signserver.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update