Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Keyfactor Signum by Keyfactor View product | Notary by CNCF View product |
|---|---|---|
| Overview | ||
| What it is | Evaluating Keyfactor Signum? See how this Software Supply Chain Security tool handles comprehensive audit logging, where it fits best and which alternatives to compare. | Shortlisting Container Security tools? Notary by CNCF brings HSM key integration, with self-hosted or cloud deployment. See strengths and alternatives. |
| Product type | Enterprise Code Signing & Software Artifact Security Solution | Container Image Signing & Verification System |
| Best for | Technology, Financial Services, Automotive, Gaming, Aerospace, Manufacturing, Defense, IoT | Cross-industry, Software, Technology, DevSecOps, Software Supply Chain, Cloud Native Enterprise |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: no | Free trial: yes |
| Deployment | ||
| Deployment options | SaaSCloudHybridOn-Premise | CloudOn-Premise |
| Deployment details | Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises software; Virtual appliance | Self-hosted; Cloud-Native; CI/CD Registry; CLI tool (notation); Kubernetes admission webhook |
| Data residency | United States; European Union; Customer-controlled on-premises | Self-hosted / Cloud Registry |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: yes | API access: yes |
| Single sign-on (SSO) | SSO: yes | SSO: no |
| Role-based access (RBAC) | RBAC: yes | RBAC: no |
| Multi-tenant | Multi-tenant: yes | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | CI/CD build environmentsContainersFirmware packagesDesktop/mobile binaries | OCI Container RegistriesKubernetesCI/CD Pipelines |
| Compliance | SOC 2 Type IIISO 27001FIPS 140-2Common CriteriaNIST SP 800-218 | CNCF IncubatingApache 2.0 |
| Integrations & coverage | ||
| Integrations | JenkinsGitHub ActionsGitLab CIAzure DevOpsThales HSMAWS CloudHSMYubiHSM | OCI RegistriesDocker HubAzure ACRAWS ECRGitHub Actions |
| Industries | TechnologyFinancial ServicesAutomotiveGamingAerospaceManufacturing+2 more | Cross-industrySoftwareTechnologyDevSecOpsSoftware Supply ChainCloud Native Enterprise |
| Regions | Global | Global |
| Vendor | ||
| Company | Keyfactor | CNCF |
| Headquarters | Cleveland, Ohio, USA | San Francisco, California, USA |
| Company size | 1,000+ | 51-200 |
| Founded | 2001 | 2015 |
Overview
What it is
Keyfactor Signum
Evaluating Keyfactor Signum? See how this Software Supply Chain Security tool handles comprehensive audit logging, where it fits best and which alternatives to compare.Notary
Shortlisting Container Security tools? Notary by CNCF brings HSM key integration, with self-hosted or cloud deployment. See strengths and alternatives.Product type
Keyfactor Signum
Enterprise Code Signing & Software Artifact Security SolutionNotary
Container Image Signing & Verification SystemBest for
Keyfactor Signum
Technology, Financial Services, Automotive, Gaming, Aerospace, Manufacturing, Defense, IoTNotary
Cross-industry, Software, Technology, DevSecOps, Software Supply Chain, Cloud Native EnterprisePricing
Pricing model
Keyfactor Signum
Contact VendorNotary
Contact VendorFree trial
Keyfactor Signum
Free trial: noNotary
Free trial: yesDeployment
Deployment options
Keyfactor Signum
SaaSCloudHybridOn-Premise
Notary
CloudOn-Premise
Deployment details
Keyfactor Signum
Cloud SaaS; On-premises; Hybrid; Cloud SaaS; On-premises software; Virtual applianceNotary
Self-hosted; Cloud-Native; CI/CD Registry; CLI tool (notation); Kubernetes admission webhookData residency
Keyfactor Signum
United States; European Union; Customer-controlled on-premisesNotary
Self-hosted / Cloud RegistryKey features
What it offers
Keyfactor Signum
- Centralized HSM key protection
- Automated CI/CD code signing
- Multi-person approval workflows
- Multi-format artifact support (Authenticode, JAR, Docker)
- Comprehensive audit logging
- Firmware authenticity validation
- Software supply chain protection
- HSM private key governance
Notary
- OCI artifact signing
- Digital signature verification
- TUF specification trust
- Admission controller enforcement
- HSM key integration
- Container image signing
- Artifact integrity validation
- Supply chain threat mitigation
Platform & access
API access
Keyfactor Signum
API access: yesNotary
API access: yesSingle sign-on (SSO)
Keyfactor Signum
SSO: yesNotary
SSO: noRole-based access (RBAC)
Keyfactor Signum
RBAC: yesNotary
RBAC: noMulti-tenant
Keyfactor Signum
Multi-tenant: yesNotary
Multi-tenant: noMobile app
Keyfactor Signum
Mobile app: noNotary
Mobile app: noSupported platforms
Keyfactor Signum
CI/CD build environmentsContainersFirmware packagesDesktop/mobile binaries
Notary
OCI Container RegistriesKubernetesCI/CD Pipelines
Compliance
Keyfactor Signum
SOC 2 Type IIISO 27001FIPS 140-2Common CriteriaNIST SP 800-218
Notary
CNCF IncubatingApache 2.0
Integrations & coverage
Integrations
Keyfactor Signum
JenkinsGitHub ActionsGitLab CIAzure DevOpsThales HSMAWS CloudHSMYubiHSM
Notary
OCI RegistriesDocker HubAzure ACRAWS ECRGitHub Actions
Industries
Keyfactor Signum
TechnologyFinancial ServicesAutomotiveGamingAerospaceManufacturing+2 more
Notary
Cross-industrySoftwareTechnologyDevSecOpsSoftware Supply ChainCloud Native Enterprise
Regions
Keyfactor Signum
Global
Notary
Global
Vendor
Company
Keyfactor Signum
KeyfactorNotary
CNCFHeadquarters
Keyfactor Signum
Cleveland, Ohio, USANotary
San Francisco, California, USACompany size
Keyfactor Signum
1,000+Notary
51-200Founded
Keyfactor Signum
2001Notary
2015