# agentsite-static-version=ad82f101-b9a0-42eb-920d-d03685af49ba # chainguard.dev > AI-optimized mirror of chainguard.dev containing 248 pages totalling 274,374 words of clean markdown content, structured data, and semantic HTML. Original source: https://chainguard.dev. Last updated: 2026-10-22T08:56:13.286Z. Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG). ## Homepage - [The trusted source for open source | Chainguard](/content/site-root.html): Chainguard provides trusted open source artifacts for every layer of your modern software stack—containers, language libraries, and VM images. (240 words) ## Articles & Blog Posts - [Avoiding Vendor Lock-In with a Compatible, Migration-Friendly, Transparent Container Distro](/content/unchained/avoiding-vendor-lock-in-with-a-compatible-migration-friendly-transparent-container-distro.html): Learn how to evaluate and select the right Linux distribution to satisfy your team's needs, simplify migration, and avoid vendor lock-in. (1,515 words) - [Chainguard vs Socket | Side-by-side comparison](/content/compare/chainguard-vs-socket/index.html): Compare the features of Chainguard and Socket side-by-side to determine which is best fit for your organization. (514 words) - [Chainguard vs Echo | Side-by-side comparison](/content/compare/chainguard-vs-echo/index.html): Compare Chainguard and Echo capabilities side-by-side to determine which product is best fit for your organization. (504 words) - [Chainguard vs. Minimus | Side-by-side comparison](/content/compare/chainguard-vs-minimus/index.html): Get the catalog, customization, and compliance depth engineers need to build safely with AI across the software development lifecycle. (637 words) - [Chainguard vs Docker Hardened Images](/content/compare/chainguard-vs-docker/index.html): Get a side-by-side comparison of Chainguard and Docker Hardened Images (DHI). (893 words) - [What it took to reach 1 billion build manifests](/content/unchained/what-it-took-to-reach-1-billion-build-manifests/index.html): Chainguard doubled its container build output in six months. Learn how Factory 2.0 uses AI and reconciliation to rebuild secure software at scale. (1,242 words) - [Chainguard vs Bitnami Secure Images](/content/compare/chainguard-vs-bitnami/index.html): Modernize your software supply chain with trusted open source artifacts that are secure top to bottom, not dependent on legacy distros (788 words) - [cve-sla/index.html](/content/cve-sla/index.html) (1,204 words) - [Introducing Chainguard Actions: CI/CD workflows you can trust](/content/unchained/introducing-chainguard-actions/index.html): Chainguard Actions is a securely rebuilt catalog of GitHub Actions and similar CI/CD workflows built and continuously maintained in the Chainguard Factory. (981 words) - [Everything we announced at Chainguard Assemble 2026](/content/unchained/everything-we-announced-at-chainguard-assemble-2026.html): Catch up on all the announcements Chainguard made at Assemble 2026, featuring AI agent skills, CI/CD workflows, and more. (981 words) - [Introducing Chainguard Commercial Builds: Secure-by-default containers for commercial software](/content/unchained/introducing-chainguard-commercial-builds/index.html): Chainguard Commercial Builds is a new partnership program with commercial and open source software providers to package software using the Chainguard Factory. (752 words) - [Introducing Chainguard Catalog Starter: Your choice of five free trusted container images from the best catalog](/content/unchained/introducing-chainguard-catalog-starter/index.html): Chainguard Catalog Starter is a new free offering that gives developers instant access to trusted container images from the industry’s most comprehensive catalog (736 words) - [Introducing Chainguard Agent Skills: Because your AI agent shouldn't trust strangers](/content/unchained/introducing-chainguard-agent-skills/index.html): Chainguard Agent Skills is a continuously maintained catalog of hardened AI agent skills. (779 words) - [Chainguard vs RapidFort: Side-by-side comparison](/content/compare/chainguard-vs-rapidfort/index.html): Modernize your software supply chain with trusted open source artifacts built from source, not debloated after. (680 words) - [Chainguard vs. WizOS | Side-by-side comparison](/content/compare/chainguard-vs-wizos/index.html): Get the catalog breadth, customization, and compliance depth engineers need to build safely with AI across the software development lifecycle. (376 words) - [This Shit is Hard: Factory-scale toolchain management](/content/unchained/this-shit-is-hard-factory-scale-toolchain-management.html): See how Chainguard automates toolchain upgrades and testing to keep thousands of open source packages current, secure, and reliable at scale. (1,216 words) - [This Shit is Hard: Making FIPS boring, fast, and post-quantum](/content/unchained/this-shit-is-hard-making-fips-boring-fast-and-post-quantum.html): FIPS compliance used to mean outdated cryptography and vendor lock-in. See how Chainguard built a secure, portable, post-quantum alternative. (1,481 words) - [This Shit is Hard: Getting commercial software into regulated environments using AI](/content/unchained/this-shit-is-hard-getting-commercial-software-into-regulated-environments-using-ai.html): Federal compliance can't scale by adding more people. See how Second Front uses AI and automation to continuously manage security and risk. (1,540 words) - [Summer of Clearinghouses](/content/unchained/summer-of-clearinghouses/index.html): Clearinghouses alone won't secure open source. Learn why actuation, trusted builds, and secure-by-design software matter more than vulnerability data. (2,983 words) - [This Shit is Hard: Building forkstore](/content/unchained/this-shit-is-hard-building-forkstore/index.html): See how Chainguard built forkstore to securely manage public CVE fixes and embargoed Athena patches on the same open source packages. (1,547 words) - [Follow the money](/content/unchained/follow-the-money/index.html): Why give away the most valuable data in security? Learn how Athena’s business model aligns trust, incentives, and open source defense. (2,893 words) - [The flood is coming and the pipes were already full](/content/unchained/the-flood-is-coming-and-the-pipes-were-already-full.html): Frontier AI is finding zero-days faster than the industry can fix them. See how Chainguard and Athena are preparing for what comes next. (3,247 words) - [Athena's disclosures begin](/content/unchained/athenas-disclosures-begin/index.html): Athena begins disclosing AI-discovered vulnerabilities, with patches, advisories, and remediated Java artifacts available to defenders today. (2,283 words) - [This Shit is Hard: Patching a vulnerability that has no fix](/content/unchained/this-shit-is-hard-patching-a-vulnerability-that-has-no-fix.html): Generating an AI security patch is easy. Trusting it is hard. Learn how Chainguard proves zero-day fixes are safe before they ship. (2,132 words) - [This Shit is Hard: How Chainguard is sandboxing Athena](/content/unchained/this-shit-is-hard-how-chainguard-is-sandboxing-athena.html): AI agents need sandboxes. Learn how Chainguard uses microVMs to safely run untrusted code, contain exploits, and protect sensitive workloads. (1,326 words) - [DriftlessAF: Introducing Chainguard Factory 2.0](/content/unchained/driftlessaf-introducing-chainguard-factory-2-0/index.html): Chainguard Factory 2.0, powered by DriftlessAF, brings AI-driven, self-healing reconciliation to build and maintain 2,000+ zero-CVE images — now open sourced. (1,136 words) - [The State of Trusted Open Source: March 2026](/content/unchained/the-state-of-trusted-open-source-march-2026/index.html): AI is accelerating software and CVE growth. Chainguard’s latest report shows rising risk in the long tail and how teams can stay secure at scale. (1,859 words) - [The first disclosure from our Mythos harness](/content/unchained/the-first-disclosure-from-our-mythos-harness/index.html): See how Chainguard used Anthropic's Mythos to identify a vLLM vulnerability and help maintainers secure shared AI inference workloads. (1,842 words) - [This Shit is Hard: Building a vulnerability database from private reports](/content/unchained/this-shit-is-hard-building-a-vulnerability-database-from-private-reports.html): Finding a zero-day is only the start. Learn how Athena determines which software versions are affected and what fixes customers should deploy. (1,644 words) - [Introducing Chainguard Harness: Vulnerability hunting and remediation powered by Claude Mythos 5.1, no model access required](/content/unchained/introducing-chainguard-harness/index.html): Introducing Chainguard Harness, powered by Claude Mythos 5.1, to discover exploitable vulnerabilities and deliver validated, reproducible fixes. (1,010 words) - [The AI Exploit Gap: How AI is changing security](/content/unchained/the-ai-exploit-gap-how-ai-is-changing-security/index.html): Chainguard's AI Exploit Gap report reveals why security teams struggle to keep pace with AI-powered attacks and what organizations can do to close the gap. (1,001 words) - [Everything we announced at Chainguard Assemble London 2026](/content/unchained/everything-we-announced-at-chainguard-assemble-london-2026.html): Chainguard Assemble London 2026 introduces new tools for secure AI development, frontier vulnerability discovery, and trusted open source. (1,048 words) - [Assemble London Speakers 2026](/content/assemble-london-2026/speakers/index.html): After a sold-out Assemble in New York, we're bringing the experience to London for the first time. (122 words) - [Assemble London Agenda 2026](/content/assemble-london-2026/agenda/index.html): After a sold-out Assemble in New York, we're bringing the experience to London for the first time. (1,007 words) - [Arpio trusts Chainguard to accelerate compliance and win enterprise deals](/content/customers/arpio-trusts-chainguard-to-accelerate-compliance-and-win-enterprise-deals.html): How Chainguard helped Arpio win a major enterprise deal without adding headcount (1,059 words) - [api/rss/index.html](/content/api/rss/index.html) (8,692 words) - [Elastic trusts Chainguard to harden the foundation its entire artifact portfolio ships on](/content/customers/elastic-trusts-chainguard-to-harden-the-foundation-its-entire-artifact-portfolio-ships-on.html): Elastic cut CVE remediation toil and unlocked FedRAMP High by adopting Chainguard's hardened, FIPS-validated containers as its image foundation. (808 words) - [The keyv and cacheable npm Supply Chain Attack: Inside the Mini Shai-Hulud Campaign](/content/unchained/the-keyv-and-cacheable-npm-supply-chain-attack-inside-the-mini-shai-hulud-campaign.html): The latest npm supply chain attack hit keyv and cacheable. See how Chainguard's malware scanning and cooldowns kept customers protected. (1,777 words) - [Black Duck trusts Chainguard to minimize supply chain risk exposure for Polaris](/content/customers/black-duck-trusts-chainguard-to-minimize-supply-chain-risk-exposure-for-polaris.html): Black Duck cuts vulnerability remediation effort and speeds FedRAMP accreditation for Polaris with Chainguard's secure-by-default images. (848 words) - [Propio trusts Chainguard to prevent AI-driven supply chain attacks](/content/customers/propio-trusts-chainguard-to-prevent-ai-driven-supply-chain-attacks.html): Propio leverages Chainguard Containers to slash CVEs and Chainguard Libraries to reduce malware risk in its open source dependencies. (701 words) - [legal/supplemental-dpa-20260324/index.html](/content/legal/supplemental-dpa-20260324/index.html) (5,424 words) - [Cobham Satcom trusts Chainguard to reduce vulnerability risk for high-stakes connectivity](/content/customers/cobham-satcom-trusts-chainguard-to-reduce-vulnerability-risk-for-high-stakes-connectivity.html): Cobham Satcom cut vulnerability maintenance by hundreds of hours per developer with Chainguard, redirecting engineers to innovation (873 words) - [Booz Allen trusts Chainguard to harden critical infrastructure for the National Weather Service](/content/customers/booz-allen-trusts-chainguard-to-harden-critical-infrastructure-for-the-national-weather-service.html): Booz Allen reduced CVEs by 85% and sped up CI/CD for the National Weather Service by replacing open source container images with Chainguard (841 words) - [The end of GitHub PATs: You can’t leak what you don’t have](/content/unchained/the-end-of-github-pats-you-cant-leak-what-you-dont-have.html): Ditch GitHub PATs for better security. Learn how to replace long-lived tokens and reduce your risk of leaked credentials. (1,339 words) - [Second Front Systems trusts Chainguard to secure its platform distribution at scale](/content/customers/second-front-systems-trusts-chainguard-to-secure-its-platform-distribution-at-scale.html): Learn how Second Front Systems offloaded container image hardening to Chainguard, freeing engineering time and scaling its platform across hundreds of clusters. (815 words) - [Chainguard + Booz Allen: Delivering Trusted Open-Source Software to U.S. Government Agencies](/content/unchained/chainguard-booz-allen-delivering-trusted-open-source-software-to-u-s-government-agencies.html): Chainguard and Booz Allen partner to help federal programs eliminate vulnerabilities, save engineering time, and accelerate compliance timelines. (419 words) - [unchained/the-state-of-trusted-open-source-june-2026/index.html](/content/unchained/the-state-of-trusted-open-source-june-2026/index.html) (1,823 words) - [ATO in a Box: Simplifying Compliance for Software Vendors with Chainguard and Ask Sage](/content/unchained/ato-in-a-box-simplifying-compliance-for-software-vendors-with-chainguard-and-ask-sage.html): Chainguard customer Ask Sage utilizes Chainguard Containers to build ATO in a Box, a solution utilizing automation to speed up the authority to operate process. (468 words) - [AWS + Chainguard | Chainguard Partnerships](/content/partners/aws/index.html): Build and deploy secure-by-default open source on AWS with Chainguard with no workflow disruption. (339 words) - [Deal Registration | Public Sector](/content/public-sector/deal-registration/index.html): Register your public sector deals with Chainguard using our streamlined form to ensure success and seamless opportunity tracking. (104 words) - [Hardened Container Images: Low-to-No CVEs by Design](/content/unchained/hardened-container-images-images-for-a-secure-supply-chain.html): Check out our analysis of the hardened container image landscape, including offerings from Red Hat, Iron Bank, and others. (1,164 words) - [Building a category: Chainguard named a Leader in the inaugural Gartner® Magic Quadrant™ for Software Supply Chain Security](/content/unchained/building-a-category-chainguard-named-a-leader-in-the-inaugural-gartner-magic-quadrant-for-software-supply-chain-security.html): Gartner names Chainguard a Leader in Software Supply Chain Security, highlighting its secure-by-default approach and market vision. (1,066 words) - [Announcing Chainguard Custom Assembly: Image Customization Without Complexity](/content/unchained/announcing-chainguard-custom-assembly-image-customization-without-complexity.html): Custom Assembly is Chainguard’s new image customization product that enables companies to consume zero-CVE open source software tailored to unique requirements. (805 words) - [8 best container security tools (And where they fall short)](/content/supply-chain-security-101/container-security-tools-a-buyers-guide/index.html): Which container security tools fit your stack? Compare eight options by features, drawbacks, pricing, and the maintenance work your team still needs to handle. (3,129 words) - [MCP security: How to evaluate an MCP server before rollout](/content/supply-chain-security-101/mcp-security/index.html): A legitimate MCP server can still return malicious instructions. This MCP security guide shows how to scope its access and test what an assistant can send. (2,967 words) - [The Maintainer of Last Resort](/content/unchained/the-maintainer-of-last-resort/index.html): Chainguard proposes a Maintainer of Last Resort to patch abandoned open source projects, publish trusted builds, and keep critical software secure. (2,378 words) - [DevSecOps automation: How to scale it with shared workflows](/content/supply-chain-security-101/devsecops-automation/index.html): A merged update PR isn’t a fix in production. Decide which DevSecOps automation to share, who owns each part, and how to pilot it before adding teams. (2,567 words) - [Growing up the hard way](/content/unchained/growing-up-the-hard-way/index.html): Open source is growing up. Explore why AI, regulation, and enterprise security are reshaping how organizations consume open source software. (2,661 words) - [Octo STS: Short-lived GitHub tokens without PATs](/content/supply-chain-security-101/octo-sts-overview/index.html): Octo STS replaces long-lived GitHub personal access tokens with short-lived, OIDC-federated tokens. Learn how it works, trust policies, and common use cases. (1,493 words) - [supply-chain-security-101/understanding-fips/index.html](/content/supply-chain-security-101/understanding-fips/index.html) (1,839 words) - [What is FIPS? Compliance requirements and verification](/content/supply-chain-security-101/what-is-fips/index.html): Learn who needs FIPS compliance, why a validated module alone isn't enough, and what to verify in containers after the FIPS 140-3 transition. (1,834 words) - [What is Wolfi? The Linux undistro for secure containers](/content/supply-chain-security-101/wolfi-overview/index.html): Wolfi is a minimal, glibc-based Linux undistro built for containers. Learn how it compares to Alpine, its key features, and how to get started. (933 words) - [Three Ways to Make Your SDLC Secure-by-Default](/content/unchained/three-ways-to-make-your-sdlc-secure-by-default/index.html): Build secure software faster with Chainguard. Learn how secure-by-default SDLC practices eliminate CVEs, automate compliance, and embed trust from code to cloud. (1,138 words) - [Docker Hodgepodge Images](/content/unchained/docker-hodgepodge-images/index.html): Docker ships their own Linux distro, they just pretend not to. Learn how misidentification and VEX usage can mislead scanners and impact supply chain security. (1,330 words) - [How financial services companies can modernize their software supply chain](/content/unchained/how-financial-services-companies-can-modernize-their-software-supply-chain.html): Modernize your financial software supply chain without disrupting critical systems. See how trusted open source reduces risk without major migrations. (1,175 words) - [Sublime Security trusts Chainguard to reduce CVEs and reclaim capacity](/content/customers/sublime-security-trusts-chainguard-to-reduce-cves-and-reclaim-capacity.html): How Sublime Security cut base image CVEs by ~100% and freed 50% of triage time using Chainguard. (905 words) - [What are containers? How container images and runtimes work](/content/supply-chain-security-101/what-are-containers/index.html): Learn what containers are, how they differ from virtual machines, what's inside a container image, and how minimal base images reduce size and CVEs. (758 words) - [What five years of Chainguard have taught us](/content/unchained/what-five-years-of-chainguard-have-taught-us/index.html): Chainguard was founded to solve open source’s trust problem. Five years later, that mission matters more than ever in the age of AI. (936 words) - [Master Service and License Agreement](/content/legal/legal-master-service-and-license-agreement-251113/index.html) (4,496 words) - [Discover the Value of Chainguard Containers with the Value Calculator](/content/unchained/discover-the-value-of-chainguard-containers-with-the-value-calculator.html): Chainguard's Value Calculator is a new tool we created to make it easy to quantify the value of using Chainguard Containers for your specific organization. (581 words) - [Proven, not promised: Chainguard Containers achieves SLSA Build Level 3](/content/unchained/proven-not-promised-chainguard-containers-achieves-slsa-build-level-3.html): Coalfire independently assessed Chainguard Containers at SLSA Build Level 3, validating hardened builds, provenance, and supply chain integrity. (974 words) - [How CTOs Can Justify Technology Investments to the Board](/content/unchained/how-ctos-can-justify-technology-investments-to-the-board.html): Learn how CTOs can tie technology investments to increasing revenue, speeding innovation, and reducing risk and cost to drive positive business outcomes. (1,106 words) - [Chainguard CVE Visualizations: Now Generally Available](/content/unchained/chainguard-cve-visualizations-now-generally-available.html): Chainguard CVE Visualizations, now generally available, is a capability that allows users to compare CVE numbers in both Chainguard Containers and upstream. (520 words) - [Meeting the Zero-CVE Mandate: How Chainguard Helps Businesses Ship Secure Software That Customers Trust](/content/unchained/meeting-the-zero-cve-mandate-how-chainguard-helps-businesses-ship-secure-software-that-customers-trust.html): Chainguard's zero-CVE containers come with broad compatibility, custom assembly, verifiable provenance and SBOMs, and more to help you ship secure software. (948 words) - [Mythos pulls zero-days forward. Here's what you need to know now.](/content/unchained/mythos-pulls-zero-days-forward-heres-what-you-need-to-know-now.html): Anthropic's Mythos is reshaping zero-day threats. Learn how Chainguard helps you stay ahead with source-built, continuously secure software supply chains. (1,608 words) - [What are CIS Benchmarks? Overview, levels, and profiles](/content/supply-chain-security-101/what-are-cis-benchmarks/index.html): Learn what CIS Benchmarks are, how Level 1 and Level 2 profiles work, and how the CIS Docker Benchmark applies to hardening container images for compliance. (874 words) - [Athena spotlight: Black Duck on the importance of flagging zero-days at scale](/content/unchained/athena-spotlight-black-duck-on-the-importance-of-flagging-zero-days-at-scale.html): AI can find zero-days faster than teams can fix them. See how Black Duck and Athena work together to turn findings into actionable protection. (504 words) - [Applying SOC 2 with Chainguard: A practical guide for DevOps and engineering leaders](/content/unchained/applying-soc-2-with-chainguard-a-practical-guide-for-devops-and-engineering-leaders.html): Learn how Chainguard helps DevOps teams meet SOC 2 requirements with secure-by-default containers, automated SBOMs, and continuous, audit-ready evidence. (730 words) - [2026: The year of AI-assisted attacks](/content/unchained/2026-the-year-of-ai-assisted-attacks/index.html): AI is lowering the barrier to cybercrime. Learn why attacks are rising fast, and how eliminating entire classes of supply chain risk is the only path forward. (1,145 words) - [What is melange? Build apk packages from source with YAML](/content/supply-chain-security-101/melange-overview/index.html): melange builds apk packages from source using declarative YAML pipelines. Learn how it works, how it handles multi-arch builds, and how it pairs with apko. (390 words) - [events/how-security-and-engineering-leaders-can-put-defense-in-depth-into-practice.html](/content/events/how-security-and-engineering-leaders-can-put-defense-in-depth-into-practice.html): Host the world live on your website. (178 words) - [Master Service and License Agreement](/content/legal/legal-master-service-and-license-agreement-080825/index.html) (4,399 words) - [Learning Labs: Trusted CI/CD with Chainguard Actions](/content/events/learning-labs-trusted-ci-cd-with-chainguard-actions.html): Join Erika Heidi, Staff DevRel Engineer at Chainguard, to learn where SHA pinning falls short and how to build real trust into your GitHub Actions supply chain., Host the world live on your website. (138 words) - [20-minute demo: Build apps without CVEs and malware](/content/events/20-minute-demo-build-apps-without-cves-and-malware/index.html): Engineers are spending their days triaging the latest supply chain attack, patching critical CVEs, and dealing with compliance., Host the world live on your website. (154 words) - [Learning Labs: Chainguard Agent Skills](/content/events/learning-labs-chainguard-agent-skills/index.html): Join Patrick Smyth to learn how Chainguard Agent Skills provides your organization with a safe, trusted source for agent skills., Host the world live on your website. (182 words) - [GitGuardian: Mastering secure code from the ground up](/content/customers/gitguardian-mastering-secure-code-from-the-ground-up.html): Explore GitGuardian’s journey to zero CVEs and how Chainguard Images played a pivotal role in redefining their software security strategy. (532 words) - [Board-Ready Security Metrics for the Mythos Era](/content/events/board-ready-security-metrics-for-the-mythos-era/index.html): As AI-native development accelerates software delivery, CISOs face growing pressure from board members to respond and communicate security postures..., Host the world live on your website. (149 words) - [Preparing for Mythos: Practical advice for engineering teams](/content/unchained/preparing-for-mythos-practical-advice-for-engineering-teams.html): Anthropic’s Mythos raises the stakes for software security. Learn how to survive faster exploits with secure-by-default supply chains and AI-assisted defense. (872 words) - [This Shit is Hard: The complexities of fixing Python library security issues at scale](/content/unchained/this-shit-is-hard-the-complexities-of-fixing-python-library-security-issues-at-scale.html): Backporting Python CVE fixes is complex and risky. Chainguard Libraries delivers source-built, tested, and verified patched packages you can trust. (2,787 words) - [Master Service and License Agreement](/content/legal/master-service-and-license-agreement-260312/index.html) (4,538 words) - [Software License Agreement Version 240321](/content/legal/software-license-agreement-250522/index.html): Guiding you through Chainguard’s Software Licensing: Key terms and conditions for effective and compliant software use. (3,290 words) - [The State of Trusted Open Source: December 2025](/content/unchained/the-state-of-trusted-open-source-december-2025/index.html): Chainguard’s State of Trusted Open Source for December 2025 dives into usage trends for Chainguard Containers, CVE data, and why remediation speed matters. (1,450 words) - [FedRAMP vulnerability scanning requirements explained](/content/unchained/fedramp-vulnerability-scanning-requirements-explained.html): Understand FedRAMP vulnerability scanning rules, scope, and SLAs. Get compliance clarity and learn how to simplify audits. (2,504 words) - [Chainguard Libraries for JavaScript | Block npm Malware](/content/libraries/javascript/index.html): Switch your JavaScript registry endpoint to Chainguard to block malware, patch CVEs, and fix zero-days before AI-assisted attackers can strike. (403 words) - [Why Golden Images Still Matter and How to Secure Them](/content/unchained/why-golden-images-still-matter-and-how-to-secure-them-with-chainguard.html): Golden container image programs can be a great way to increase efficiency and security for your engineering team. Learn how to do it right with Chainguard. (1,384 words) - [Code Analysis Terms](/content/legal/code-analysis-terms/index.html) (2,031 words) - [Master Service and License Agreement](/content/legal/evaluation-terms/index.html) (2,574 words) - [Taming bad Python packages: Assessing Python malware detectors with a benchmark dataset](/content/unchained/taming-bad-python-packages-assessing-python-malware-detectors-with-a-benchmark-dataset.html): Enhance your Python security! Learn how Chainguard's new dataset is revolutionizing malware detection in Python environments. (1,493 words) - [This Shit Is Hard: Vulnerability Scanner Integration](/content/unchained/this-shit-is-hard-vulnerability-scanner-integration.html): Chainguard Containers have extensive scanner integrations with many of the most popular container image scanners. Discover more about our integrations. (1,727 words) - [AI is finding vulnerabilities faster than anyone can patch them. Now what?](/content/unchained/ai-is-finding-vulnerabilities-faster-than-anyone-can-patch-them-now-what.html): Project Glasswing and Claude Mythos Preview reveal a surge in zero-days. Learn why reactive patching fails and how secure-by-default supply chains keep you safe. (1,077 words) - [Chainguard Support Policy](/content/legal/support-policy/index.html): Learn about Chainguard’s Support Policy: Ensuring a secure, respectful, and compliant digital environment. (1,773 words) - [Chainguard Libraries for Java | Eliminate Java CVEs](/content/libraries/java/index.html): Trade Maven Central for a trusted, verified dependencies from Chainguard so your team can ship without supply chain risk. (432 words) - [Cookie Policy](/content/legal/cookie-policy/index.html): Chainguard’s commitment to transparency: Delve into our cookie policy for a clear understanding of data usage and privacy. (1,667 words) - [Announcing Chainguard Libraries: Guarded Java Language Dependencies Built from Source](/content/unchained/announcing-chainguard-libraries-guarded-java-language-dependencies-built-from-source.html): Chainguard Libraries is a catalog of guarded Java dependencies built securely from source in Chainguard’s SLSA-certified infrastructure. (1,032 words) - [Vendor Code of Conduct](/content/legal/vendor-code-of-conduct/index.html): Learn about Chainguard's Vendor Code of Conduct: Ensuring minimum standards expected from all vendors, suppliers, contractors, and service providers (1,155 words) - [CVE SLA](/content/legal/cve-policy/index.html): Learn about Chainguard’s CVE SLA: Ensuring a secure, respectful, and compliant digital environment. (1,057 words) - [FIPS Commitment](/content/legal/fips-commitment/index.html): Your guide to Chainguard’s FIPS Commitment: Learn about user responsibilities and our commitments to maintain a high-quality service. (726 words) - [Achieve PCI DSS v4.0 compliance with Chainguard Images](/content/unchained/achieve-pci-dss-v4-0-compliance-with-chainguard-images.html): Navigating PCI DSS v4.0 compliance? Chainguard Images simplifies the process with secure, compliant container images for your payment applications. (775 words) - [The expanding threat landscape: Chainguard now scans source code for traditional malware and “greyware”](/content/unchained/the-expanding-threat-landscape-chainguard-now-scans-source-code-for-traditional-malware-and-greyware.html): Chainguard’s new scanner blocks malware and ‘greyware’ before it reaches developers, protecting 100,000+ packages daily across open source ecosystems. (1,317 words) - [Meet Guardener: The intelligent migration expert for everyone](/content/unchained/meet-the-guardener/index.html): Guardener is an AI-native agent that accelerates engineering teams’ adoption of trusted open source artifacts across software development and deployment. (834 words) - [Panic! At The Distro: A Study of Malware Prevention in Linux Distributions](/content/unchained/panic-at-the-distro-a-study-of-malware-prevention-in-linux-distributions.html): Chainguard wanted to know more about malware prevention in Linux distributions. So we did a study to see what maintainers are doing about it. See the results. (1,274 words) - [Modern Slavery Act Statement](/content/legal/source-available-license-agreement/index.html): This statement constitutes Chainguard’s slavery and human trafficking statement for the financial year ending 31st January 2026. (1,523 words) - [Inbound Vulnerability Disclosure Policy](/content/legal/inbound-vulnerability-disclosure-policy/index.html): Explore Chainguard's Inbound Vulnerability Disclosure Policy. Learn how to report security issues responsibly and contribute to a safer digital ecosystem. (1,333 words) - [Chainguard’s STIG-Hardened FIPS Images now generally available](/content/unchained/chainguards-stig-hardened-fips-images-now-generally-available.html): Enhance your container security with Chainguard's STIG-hardened FIPS images, now generally available, offering unparalleled compliance and protection. (617 words) - [Ship and patch doesn't cut it in the AI era](/content/unchained/ship-and-patch-doesnt-cut-it-in-the-ai-era/index.html): AI is accelerating code and attacks. Learn why patching alone can’t keep up, and why securing the software supply chain starts with trusted inputs. (1,066 words) - [How R1 Universities Can Simplify CMMC 2.0 Compliance with Chainguard Containers](/content/unchained/how-r1-universities-can-simplify-cmmc-2-0-compliance-with-chainguard-containers.html): With CMMC 2.0 compliance becoming an important prerequisite to research funding for R1 universities, Chainguard Containers are the perfect solution. See how. (1,084 words) - [This Shit is Hard: The life and death of a CVE in the Chainguard Factory](/content/unchained/this-shit-is-hard-the-life-and-death-of-a-cve-in-the-chainguard-factory.html): The Chainguard Factory and DriftlessAF automate CVE detection and patching, delivering fixes in hours and maintaining industry-leading remediation SLAs. (771 words) - [Chainguard Trademark Use Policy](/content/legal/chainguard-trademark-use-policy/index.html): Learn more about Chainguard's trademark policy, including Wolfi, Chainguard, and more. (1,084 words) - [The Hidden Costs of CVEs — And the Value You’re Leaving on the Table](/content/unchained/the-hidden-costs-of-cves-and-the-value-youre-leaving-on-the-table.html): Chainguard evaluated the amount of money customers are saving and unlocking by utilizing Chainguard Containers as their secure container image solution. (1,032 words) - [Additional Third Party Terms](/content/legal/additional-third-party-terms/index.html): Terms and conditions for Third Party Software that may be included in Chainguard Products, in addition to any other license terms applicable. (366 words) - [Malware-Resistant Python without the Guesswork](/content/unchained/malware-resistant-python-without-the-guesswork/index.html): The recent compromise of the num2words package never made it into Chainguard Libraries for Python. Get the breakdown from the team on our packages you can trust. (689 words) - [Outbound Vulnerability Disclosure Policy](/content/legal/coordinated-vulnerability-handling-policy/index.html): Chainguard's Outbound Vulnerability Disclosure Policy ensures responsible reporting and collaboration to remediate security vulnerabilities for safer technology. (812 words) - [Mitigating Malware in the Python Ecosystem with Chainguard Libraries](/content/unchained/mitigating-malware-in-the-python-ecosystem-with-chainguard-libraries.html): Chainguard recently found that 98% of malicious Python libraries from the Backstabber's Knife Collection could be avoided by using Chainguard Libraries. (864 words) - [Introducing Chainguard OS Packages: Secure ingredients for custom container builds](/content/unchained/introducing-chainguard-os-packages/index.html): Chainguard OS Packages are enterprise-grade, zero-CVE packages and base images built and continuously maintained in the Chainguard Factory. (588 words) - [Chainguard Java Images Now Support FIPS 140-3](/content/unchained/chainguard-java-images-now-support-fips-140-3/index.html): Chainguard Java Images now support FIPS 140-3 with Bouncy Castle 2.0. Future-proof your compliance and simplify audits with pre-configured, secure images. (571 words) - [Chainguard’s Vision for a Safer Software Supply Chain](/content/unchained/chainguards-vision-for-a-safer-software-supply-chain.html): Chainguard is building the future of secure software development, where security and innovation move in lockstep and every line of code makes software safer. (641 words) - [Revolutionizing container security and CVE management](/content/unchained/revolutionizing-container-security-and-cve-management.html): Discover Wolfi, the 'secure-by-default' undistro for container security, enhancing open-source software with minimal CVE counts and robust protection. (466 words) - [Registries and the npm Breach: Securing the Weakest Link in the Software Supply Chain](/content/unchained/registries-and-the-npm-breach-securing-the-weakest-link-in-the-software-supply-chain.html): Chainguard Libraries provides a different and proven defense against supply chain attacks like the recent npm breach. See why preventing malware is important. (547 words) - [Chainguard License for Commercial Scanners](/content/legal/chainguard-license-for-commercial-scanners/index.html): Chainguard License for Commercial Scanners: definitions of the chainguard license for commercial scanners (630 words) - [Master Service and License Agreement](/content/legal/products-technology-previews/index.html) (164 words) - [Public Sector Supplemental Terms](/content/legal/public-sector-terms/index.html) (434 words) - [DISA STIG Commitment](/content/legal/disa-stig-commitment/index.html): Your guide to Chainguard’s DISA STIG Commitment: Learn about user responsibilities and our commitments to maintain a high-quality service. (350 words) - [Master Service and License Agreement](/content/legal/offerings-overview/index.html) (211 words) - [Master Service and License Agreement](/content/legal/support-jumpstart-advisory-offerings/index.html) (50 words) - [Master Service and License Agreement](/content/legal/public-sector-support-offerings/index.html) (45 words) - [Have We Reached a Distroless Tipping Point?](/content/unchained/have-we-reached-a-distroless-tipping-point/index.html): The world is at an inflection point in open source software delivery. See where the software distribution status quo is at, and what is next. (966 words) - [The Distroless Revolution Will Be Chainguarded](/content/unchained/the-distroless-revolution-will-be-chainguarded/index.html): Chainguard OS is the next generation in open source software delivery. Learn all about the principles and technology that make it possible. (787 words) - [Announcing Chainguard VMs: Minimal, Zero-CVE Container Host Images](/content/unchained/announcing-chainguard-vms-minimal-zero-cve-container-host-images.html): Chainguard VMs is a catalog of guarded, minimal, zero-CVE container host images that is now in Early Access. (1,149 words) - [Expanding Chainguard VMs: Zero-CVE Application & Base Virtual Machine Images for Cloud and On-Prem](/content/unchained/expanding-chainguard-vms-zero-cve-application-base-virtual-machine-images-for-cloud-and-on-prem.html): Chainguard VMs is expanding with new Application and Base VM Images — giving teams a secure, zero-CVE foundation to build and innovate faster. (688 words) - [Kernel-Independent FIPS Images](/content/unchained/kernel-independent-fips-images/index.html): Chainguard's FIPS Images are available for deployment on any Linux kernel, thanks to some new innovation by our engineering team. Learn what this means. (1,246 words) - [Why your company is wasting thousands of hours on software vulnerabilities](/content/unchained/why-your-company-is-wasting-thousands-of-hours-on-software-vulnerabilities.html): Chainguard Labs surveyed nine companies to see how many hours they spent on vulnerability management each year. Check out this blog to see the results. (870 words) - [Disrupting the status (distro)quo](/content/unchained/disrupting-the-status-distro/index.html): The traditional "distro" model of open source software delivery is ready for innovation. Learn how we got to this point and what comes next. (1,032 words) - [Chainguard Product Tour | Technical Demo](/content/tour-video/index.html): A pre-recorded video tour of the Chainguard platform, led by our technical product experts. (35 words) - [How CVEs slow down developer productivity](/content/unchained/how-cves-slow-down-developer-productivity/index.html): Tired of wasting time on CVEs? Learn how to streamline container security, boost developer productivity, and reduce risk. Data-backed insights inside. (803 words) - [FIPS-ing the Un-FIPS-able: Apache Cassandra](/content/unchained/fips-ing-the-un-fips-able-apache-cassandra/index.html): Chainguard was able to create FIPS container images for Apache Cassandra 4.0, 4.1, and 5.0. See how we did it. (738 words) - [Announcing the Chainguard Compliance Dashboard](/content/unchained/announcing-the-chainguard-compliance-dashboard/index.html): Chainguard launches its Compliance Dashboard, giving teams verifiable DISA STIG and FIPS 140-3 evidence for the exact container images they run. (626 words) - [Chainguard Libraries for .NET | Block NuGet Malware](/content/libraries/dotnet/index.html): Switch .NET build configs to point to Chainguard Libraries to block malware and eliminate the time your team spent vetting packages or tackling incident response (410 words) - [Announcing Chainguard’s industry-first validated FIPS 140-3 module delivering post-quantum readiness](/content/unchained/announcing-chainguards-industry-first-validated-fips-140-3-module-delivering-post-quantum-readiness.html): Chainguard delivers the first FIPS 140-3 validated module with approved hybrid post-quantum key exchange, helping teams prepare for CNSA 2.0. (565 words) - [Announcing the Sovereign Artifacts beta](/content/unchained/announcing-the-sovereign-artifacts-beta/index.html): Chainguard launches Sovereign Artifacts in beta, giving global organizations an EU-local option for secure container and library artifacts. (365 words) - [Introducing Chainguard MCP for secure agentic development](/content/unchained/introducing-chainguard-mcp-for-secure-agentic-development.html): Chainguard MCP brings secure-by-default open source to AI coding workflows, helping agents verify dependencies and enforce enterprise policies. (438 words) - [Chainguard Libraries for Go | Secure Go Module Proxy](/content/libraries/go/index.html): Point your Go proxy to Chainguard to block malicious dependencies and remediate critical and high-severity CVEs before they ever reach production. (434 words) - [Introducing the Chainguard Console Insights Dashboard, powered by Guardener](/content/unchained/introducing-the-chainguard-console-insights-dashboard-powered-by-guardener.html): Discover container risk, measure CVE reduction, and automate migration to Chainguard Containers with the new Insights dashboard and Guardener. (611 words) - [How do you harden an agent skill? The simple file type with serious complexities](/content/unchained/how-do-you-harden-an-agent-skill-the-simple-file-type-with-serious-complexities.html): Learn how Chainguard Factory hardens AI agent skills by detecting malicious behavior, fixing risks, and verifying functionality before release. (946 words) - [Chainguard Libraries expands to Go and .NET](/content/unchained/chainguard-libraries-expands-to-go-and-dotnet/index.html): Chainguard announces Go and .NET support for Libraries, plus expanded CVE remediation for Java, JavaScript, and Go to reduce supply chain risk. (782 words) - [Global Candidate Privacy Notice](/content/legal/candidate-privacy-notice/index.html): The Global Candidate Privacy Notice outlines how Chainguard collects, processes, and protects the personal information of job candidates. (4,369 words) - [It’s time to rethink golden images. Chainguard can help.](/content/unchained/its-time-to-rethink-golden-images-chainguard-can-help.html): Chainguard helps teams build developer-centric golden image programs with zero-CVE, purpose-built containers—balancing speed, security, and standardization. (923 words) - [Cloudera trusts Chainguard to secure the foundation of enterprise data](/content/customers/cloudera-trusts-chainguard-to-help-secure-the-foundation-of-enterprise-data.html): Cloudera cut container CVEs by 90%+ and maintained FedRAMP compliance with Chainguard. (666 words) - [Introducing Chainguard Workspaces](/content/unchained/introducing-chainguard-workspaces/index.html): Introducing Chainguard Workspaces: secure, microVM-based environments that help developers and AI agents build faster without exposing credentials. (1,736 words) - [Chainguard Actions is Generally Available: Hardening 1,000+ GitHub Actions and removing transitive CI/CD risks](/content/unchained/chainguard-actions-is-generally-available-hardening-1-000-github-actions-and-removing-transitive-ci-cd-risks.html): Secure GitHub Actions beyond SHA pinning. Chainguard Actions is now GA with 1,000+ hardened, continuously verified drop-in replacements. (1,120 words) - [Modern Slavery Act Statement](/content/legal/modern-slavery-act-statement/index.html): This statement constitutes Chainguard’s slavery and human trafficking statement for the financial year ending 31st January 2026. (331 words) - [Introducing Chainguard Checks](/content/unchained/introducing-chainguard-checks/index.html): Introducing Chainguard Checks, secure CI for developers and AI agents with fast pre-commit testing, isolated microVMs, and signed attestations. (1,534 words) - [How does Chainguard prevent malware in Chainguard Libraries?](/content/unchained/how-does-chainguard-prevent-malware-in-chainguard-libraries.html): With Chainguard Libraries, customers rely on a single controlled, auditable system. (999 words) - [Terms of Use](/content/legal/terms-of-use/index.html): Get acquainted with Chainguard’s Terms of Use: Comprehensive information to guide your interaction with our digital offerings. (5,147 words) - [Privacy Notice](/content/legal/privacy-notice/index.html): Committed to safeguarding your data: Chainguard’s privacy notice outlines our approach to data security and user privacy. (5,410 words) - [A Better Way to Consume Third-Party Applications](/content/unchained/a-better-way-to-consume-third-party-applications/index.html): Chainguard Containers are a great way to consume third party applications like MySQL, NGINX, ArgoCD, and others while reducing size and CVEs. (951 words) - [Introducing Chainguard Repository: A unified experience for secure-by-default open source artifacts](/content/unchained/introducing-chainguard-repository/index.html): Chainguard Repository is a single, Chainguard-managed experience for pulling secure-by-default artifacts with built-in, configurable policy enforcement. (701 words) - [What’s New: Product Announcements, Feature Releases, and Roadmap - November 2026](/content/events/whats-new-november-2026/index.html): What’s New is our quarterly product announcements and feature releases webinar. This webinar will recap Assemble London's biggest product announcements., Host the world live on your website. (239 words) - [5 security myths that Mythos ended (as told by a CISO)](/content/unchained/5-security-myths-that-mythos-ended-as-told-by-a-ciso.html): Mythos and AI-driven exploits are breaking old security assumptions. Learn the five myths security teams must retire to survive the new era. (1,258 words) - [Expanding Athena](/content/unchained/expanding-athena/index.html): See how Athena is helping secure open source by coordinating AI-discovered vulnerabilities, partner protections, and upstream fixes at scale. (1,602 words) - [VPBank trusts Chainguard to secure critical financial infrastructure](/content/customers/vpbank-trusts-chainguard-to-secure-critical-financial-infrastructure.html): With Chainguard, VPBank scaled its cloud-native infrastructure while minimizing developer toil and reducing CVEs by over 90%. (616 words) - [Compare Chainguard to the competition](/content/compare/index.html): See how Chainguard stacks up to other software supply chain security solutions on the market. (314 words) - [This Shit is Hard: Inside the Chainguard Factory](/content/unchained/this-shit-is-hard-inside-the-chainguard-factory/index.html): The Chainguard Factory combines world-class talent and automation to produce packages and images at a level of speed unmatched by any other Linux distribution. (1,485 words) - [This Shit is Hard: How AI keeps our code on standard](/content/unchained/this-shit-is-hard-how-ai-keeps-our-code-on-standard.html): Chainguard uses AI-powered agents to continuously enforce engineering standards, remediate drift, and keep codebases aligned at scale. (2,994 words) - [Acceptable Use Policy | Legal | Chainguard](/content/legal/acceptable-use-policy/index.html): This Acceptable Use Policy ("AUP") specifies the policies that govern your access and use of Chainguard products and services. (912 words) - [Chainguard Assemble 2026](/content/events/assemble-2026/index.html): Relive Chainguard’s event for engineering and security leaders committed to building the future of secure software. (1,571 words) - [The hardest fork](/content/unchained/the-hardest-fork/index.html): Mythos is changing software security fast. AI-driven zero-days demand new trust infrastructure, coordinated disclosure, and secure open source consumption. (1,545 words) - [careers/index.html](/content/careers/index.html) (1,390 words) - [Securing Innovation at Speed: The Army Software Factory Implements New Methods to Deliver Critical Software to the Force](/content/customers/securing-innovation-at-speed-the-army-software-factory-implements-new-methods-to-deliver-critical-software-to-the-force.html): The Army Software Factory uses Chainguard to cut CVE fixes from weeks to hours, boosting security and freeing 40% of developer time for mission needs. (1,018 words) - [Delivering Innovative Solutions for the U.S. Department of Defense: Shift5's Journey with Chainguard](/content/customers/shift5s-journey-with-chainguard/index.html): Shift5 uses Chainguard Images to reduce vulnerabilities, give time back to their engineering team, and reach compliance standards like FedRAMP and CMMC. (1,352 words) - [Athena: Chainguard announces an industry coalition](/content/athena/index.html): The industry coalition to protect open source software from AI attacks through orchestrated defense. (867 words) - [Canva trusts Chainguard to eliminate supply chain risk for its platform serving 260 million monthly users](/content/customers/canva-trusts-chainguard-to-eliminate-supply-chain-risk-for-its-platform-serving-260-million-monthly-users.html): Canva protects 260M monthly users by eliminating container CVEs and Python supply chain risk with Chainguard. (797 words) - [Going beyond CVEs: Chainguard’s one day KEV SLA](/content/unchained/going-beyond-cves-chainguards-one-day-kev-sla/index.html): Chainguard introduces a 1-day KEV SLA, ensuring exploited vulnerabilities are fixed fast—aligned with how security teams prioritize real-world threats. (523 words) - [Appian Trusts Chainguard to Reduce Engineering Toil and Accelerate Innovation](/content/customers/appian-trusts-chainguard-to-reduce-engineering-toil-and-accelerate-innovation.html): Appian partners with Chainguard to cut engineering toil, meet compliance with ease, and free developers to focus on innovation. (898 words) - [Trustpilot Trusts Chainguard to Redefine What Secure-by-Default Looks Like](/content/customers/trustpilot-trusts-chainguard-to-redefine-what-secure-by-default-looks-like.html): Trustpilot cuts vulnerability noise, boosts engineering focus, and scales securely using Chainguard Containers as its golden path for secure builds. (877 words) - [Securing Trust in the Data Cloud: Snowflake’s Journey With Chainguard](/content/customers/securing-trust-in-the-data-cloud-snowflakes-journey-with-chainguard.html): Learn how Snowflake built a secure Data Cloud with Chainguard Images, achieving FedRAMP High for enhanced trust and compliance. (1,140 words) - [Finfare Financial Inc.: Achieving Compliance and Increasing Efficiency with Chainguard](/content/customers/finfare-financial-inc-achieving-compliance-and-increasing-efficiency-with-chainguard.html): Finfare cut vulnerabilities by 96% and streamlined compliance with Chainguard’s secure-by-default containers—boosting efficiency without slowing devs. (837 words) - [Asana trusts Chainguard to simplify compliance and expand into federal markets](/content/customers/asana-trusts-chainguard-to-simplify-compliance-and-expand-into-federal-markets.html): Asana cut vulnerabilities by 99.8%, simplified compliance, and achieved FedRAMP readiness with Chainguard, unlocking faster, secure growth in federal markets. (786 words) - [Chainguard Newsroom](/content/newsroom/index.html): Chainguard Newsroom is the source for news about Chainguard. Read press releases, get updates, watch video and download images. (275 words) - [About: The team, customers, and investors building the future](/content/about-us/index.html): Founded by a team of world-class engineers, Chainguard is on a mission to be the safe source for open source. Our history and values drive us to deliver. (413 words) - [Open Source Leadership | Chainguard](/content/open-source-leadership/index.html): Chainguard builds an open toolchain for secure software delivery, contributes upstream fixes, and leads key cloud-native projects. (979 words) - [Unchained: Our Blog](/content/unchained/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (208 words) - [Assemble London 2026 | Chainguard](/content/assemble-london-2026/index.html): After a sold-out Assemble in New York, we're bringing the experience to London for the first time. (638 words) - [Customers | Chainguard](/content/customers/index.html): Find out why the world’s leading companies trust Chainguard as their safe source for open source. Hear from Snowflake, GitGuardian, Shift5, Domino, and more. (576 words) - [Chainguard Events](/content/events/index.html): Explore the latest in security with Chainguard at our events and webinars. Connect, learn, and lead in software supply chain innovation. (143 words) - [Supply Chain Security 101](/content/supply-chain-security-101/index.html): Everything you need to know about software supply chain security in the age of open source. (414 words) - [AI-Assisted Supply Chain Attacks | Stay protected with Chainguard](/content/solutions/ai-threat-protection/index.html): With AI, attacks now move at a scale and speed businesses can’t match — and the impact is mounting. (9,391 words) - [Chainguard for Startups | Scale fast and securely](/content/solutions/technology/index.html): High-growth companies rely on Chainguard to deliver the enterprise-grade open source supply chains large organizations demand. (600 words) - [Anduril Trusts Chainguard to Innovate at Mission Speed and Scale](/content/customers/anduril-trusts-chainguard-to-innovate-at-mission-speed-and-scale.html): Chainguard helps Anduril meet zero-CVE security standards, freeing engineers to innovate faster across mission-critical defense systems. (838 words) - [Chainguard for Telecommunications | Stop network attacks](/content/solutions/telecommunications/index.html): Chainguard secures the open source foundation of telecom networks, protecting critical infrastructure from AI-driven supply chain attacks. (264 words) - [Chainguard for Financial Services | Prevent cyber attacks](/content/solutions/financial-services/index.html): Chainguard secures the foundation banks and financial services companies build on so they can build safely with AI and prevent supply chain attacks. (289 words) - [Chainguard for the Public Sector | Secure OSS](/content/solutions/public-sector/index.html): Chainguard provides the infrastructure that secures open source at machine speed so critical systems stay protected, compliant, and mission-ready. (339 words) - [This Shit is Hard: Building hardened PyTorch wheels with upstream parity](/content/unchained/this-shit-is-hard-building-hardened-pytorch-wheels-with-upstream-parity.html): Learn how Chainguard tackled dependency resolution, toolchain challenges, and manylinux compatibility to deliver hardened PyTorch wheels. (2,371 words) - [legal/supplemental-dpa/index.html](/content/legal/supplemental-dpa/index.html) (4,970 words) - [Standardize your golden images with Chainguard](/content/solutions/golden-images/index.html): Whether it’s for security, compliance, or developer velocity and efficiency, standardize your golden images on a secure, scalable foundation with Chainguard. (387 words) - [SOC 2 readiness with Chainguard](/content/solutions/soc2/index.html): Turn continuous compliance into a differentiator. Operationalize SOC 2 in real time to accelerate enterprise trust and reduce risk without slowing innovation. (280 words) - [Eliminate CVEs with Chainguard](/content/solutions/cve-remediation/index.html): Establish a secure, zero-CVE foundation for open source with container and virtual machine images rebuilt from source daily. (350 words) - [Secure your AI SDLC with Chainguard](/content/solutions/ai-security/index.html): Chainguard secures the AI software development lifecycle against vulnerabilities, malware, and supply chain attacks. (196 words) - [Security Software for CMMC Compliance | Stay Audit-Ready](/content/solutions/cmmc/index.html): Discover how Chainguard's CMMC compliance services help streamline certification and ongoing compliance to help you unlock DoD funding. (517 words) - [Simplify PCI-DSS Requirements with Chainguard](/content/solutions/pci/index.html): Discover how Chainguard's PCI DSS compliance services help simplify continuous compliance for vendors with cardholder environments. (493 words) - [Chainguard Libraries for Python | Block PyPI Malware](/content/libraries/python/index.html): Python libraries built to be malware-resistant and drop into your existing enterprise applications. (488 words) - [Scanner Partners | Chainguard](/content/scanners/index.html): Chainguard has partnered with leading open-source and enterprise vulnerability scanners to enhance security and developer team efficiency. (179 words) - [Simplify FedRAMP Certification with Chainguard](/content/solutions/fedramp/index.html): Discover how Chainguard's FedRAMP compliance services accelerate accreditation and simplify continuous monitoring for ATO. (502 words) - [Master Service and License Agreement](/content/legal/master-service-and-license-agreement/index.html) (4,794 words) - [Chainguard Factory | Chainguard](/content/factory/index.html): The AI-powered factory rebuilding open source. Reconciler bots and AI agents run continuously across Chainguard's entire catalog. (401 words) - [Chainguard Guardener | Easy, AI-assisted migration](/content/guardener/index.html): Migrate to secure-by-default open source without the manual lift. Guardener automates adoption of Chainguard's hardened artifacts at scale. (251 words) - [Chainguard Checks | Ship through trusted CI](/content/checks/index.html): Stop waiting on central build queues. Run identical checks pre-commit or through the GitHub App, inside warm, Chainguard-hardened microVMs. (412 words) - [Chainguard OS Packages | 30,000+ secure packages](/content/os-packages/index.html): Choose from 30,000+ zero-CVE packages to build a secure foundation for your next project. (398 words) - [Chainguard Actions | Secure-by-default CI/CD workflows](/content/actions/index.html): Chainguard Actions hardens your CI/CD automation scripts so your team and AI coding agents can ship fast without supply chain risk. (337 words) - [Chainguard Libraries | Secure Open Source Dependencies](/content/libraries/index.html): Drop-in replacements for the exact Python, Java, JavaScript, Go, and .NET packages you already use, built from verified source code in a secure environment. (803 words) - [Chainguard VMs | Secure your virtual machine images](/content/vms/index.html): Use Chainguard VMs to standardize on optimized, purpose-built virtual machine images for each of your cloud environments and tooling. (576 words) - [Chainguard Containers | 3,000+ hardened container images](/content/containers/index.html): Chainguard delivers the industry’s largest zero-CVE, built-from-source container image catalog for engineers who refuse to choose between velocity and trust. (481 words) - [Chainguard Product Announcements | Assemble London 2026](/content/assemble26-london-announcements/index.html): Read more about all of the new product innovations announced by Chainguard at Assemble London 2026. (236 words) - [Chainguard Harness | Eliminate CVE and malware exposure](/content/harness/index.html): Chainguard Harness builds your apps from source in an isolated environment and lets a frontier model hunt through a live instance for exploitable vulnerabilities (436 words) - [Chainguard Pricing](/content/pricing/index.html): Discover Chainguard’s transparent and flexible pricing plans for Zero CVE, Containers. Explore options tailored for enterprises and startups alike. (1,208 words) - [Chainguard Workspaces | Code safely with agents](/content/workspaces/index.html): Unleash faster agentic development, secured by the hardened isolation that enterprise security demands. (387 words) - [Chainguard Agent Skills | 1,000+ hardened skills](/content/agent-skills/index.html): Agents are only as safe as the skills you give it. Stop letting it pick up unvetted dependencies from the digital sidewalk. (153 words) ## Listings & Categories - [Jason Hall | Author | Chainguard Blog](/content/unchained/author/jason-hall/index.html): Jason Hall is a former Principal Software Engineer at Chainguard — browse their articles on chainguard.dev on securing open source software. (93 words) - [Tom White | Author | Chainguard Blog](/content/unchained/author/tom-white/index.html): Tom White is Senior Director of Public Sector Partnerships at Chainguard, with 30+ years building partner programs at companies like Snowflake. (94 words) - [Maxime Gréau | Author | Chainguard Blog](/content/unchained/author/maxime-greau/index.html): Maxime Gréau is a Principal Software Engineer at Chainguard who spent over seven years at Elastic and is based in the Boston area. (65 words) - [Dan Lorenc | Author | Chainguard Blog](/content/unchained/author/dan-lorenc/index.html): Dan Lorenc is co-founder and CEO of Chainguard, setting the company vision and helping organizations like Canva, Snap, and Snowflake build securely. (119 words) - [Unchained: Our Blog](/content/unchained/category/news/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (219 words) - [Unchained: Our Blog](/content/unchained/category/open-source/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (173 words) - [Unchained: Our Blog](/content/unchained/category/research/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (129 words) - [Unchained: Our Blog](/content/unchained/category/product/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (52 words) - [Unchained: Our Blog](/content/unchained/category/engineering/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (244 words) - [Quincy Castro | Author | Chainguard Blog](/content/unchained/author/quincy-castro/index.html): Quincy Castro is the CISO at Chainguard, leading the company's cybersecurity strategy and its Security and Technology organization. (198 words) - [Ross Gordon | Author | Chainguard Blog](/content/unchained/author/ross-gordon/index.html): Ross Gordon is a Staff Product Marketing Manager at Chainguard leading Chainguard Libraries, previously at LinkedIn, Lattice, and Slack. (182 words) - [Supply Chain Security 101](/content/supply-chain-security-101/category/software-supply-chain/index.html): Everything you need to know about software supply chain security in the age of open source. (381 words) - [Supply Chain Security 101](/content/supply-chain-security-101/category/compliance/index.html): Everything you need to know about software supply chain security in the age of open source. (387 words) - [Supply Chain Security 101](/content/supply-chain-security-101/category/appsec/index.html): Everything you need to know about software supply chain security in the age of open source. (383 words) - [Supply Chain Security 101](/content/supply-chain-security-101/category/devsecops/index.html): Everything you need to know about software supply chain security in the age of open source. (378 words) - [Angela Zhang | Author | Chainguard Blog](/content/unchained/author/angela-zhang/index.html): Angela Zhang is a Senior Product Manager at Chainguard working on Chainguard Libraries and the Console, and previously worked at Microsoft. (90 words) - [Supply Chain Security 101](/content/supply-chain-security-101/category/tools-buyers-guides/index.html): Everything you need to know about software supply chain security in the age of open source. (225 words) - [Alex Burrage | Author | Chainguard Blog](/content/unchained/author/alex-burrage/index.html): Alex Burrage is Director of Product Security at Chainguard, previously at Bumble and Canonical, and holds a PhD in cryptography. (53 words) - [Reid Tatoris | Author | Chainguard Blog](/content/unchained/author/reid-tatoris/index.html): Reid Tatoris is VP of Product at Chainguard, leading containers, OS, and AI/CI products after roles at Cloudflare and AWS. (123 words) - [Unchained: Our Blog](/content/unchained/category/security/index.html): Read the latest software supply chain & open source security updates, from our opinions on security technologies to research & remedies for the biggest threats. (69 words) - [Aaditya Jain | Author | Chainguard Blog](/content/unchained/author/aaditya-jain/index.html): Aaditya Jain is a former Senior Product Marketing Manager at Chainguard. (80 words) ## Resources - [Full Page Index](/index.html): Browse all cached pages with rich metadata - [About This Cache](/about.html): Methodology, technical details, and usage guidelines - [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery - [Robots.txt](/robots.txt): Crawler directives - [Agentsite Network](https://agentsite.network/network.html): Public index of Agentsites and their machine-readable resources