SignPath

7.3easy start · #2 of 26
in Code Signing Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows.

SignPath is ranked #2 of 26 in code signing software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan.

SignPath plans and pricing

All plans

Open Source Code Signing Free For open source projects · eligibility conditions apply signpath.org · 29 Sept 2026

Compared on code signing software

Free plan: Yes
Supported targets: Windows PE files, PowerShell, MSI, CAB, catalog, APPX, MSIX, NuGet, Java archives, containers, Linux packages, macOS code, and custom artifacts
Certificate provided: Yes
Cloud signing: Yes
HSM key protection: Yes
Trusted timestamping: Yes
CI/CD signing: Yes
Approval workflows: Yes

Best SignPath alternatives

See all 20

SignServer 0 of 4 in the starter kit Lesson 17.9 AWS Signer 0 of 4 in the starter kit Lesson 37.2 Cosign 0 of 4 in the starter kit Lesson 47.1 Sigstore 0 of 4 in the starter kit Lesson 57.1 Keyfactor Platform 0 of 4 in the starter kit Lesson 67.0 SignPath Foundation 0 of 4 in the starter kit Lesson 77.0

The record

Purpose: SignPath provides code signing and software integrity tools that enforce policies across software builds and releases.
Signing: Its semantic code signing supports format-aware signing for executables, packages, installers, containers, scripts, manifests, SBOMs, and configuration files.
Pipeline integrity: The platform can verify source repositories, branches, build systems, approvals, and CI/CD context before trusting a release.
Attestation: SignPath can generate signed, machine-readable attestations including SLSA provenance, validation summaries, and signed SBOMs.
Integrations: The company lists plugins and REST API integrations for GitHub Actions, GitLab, Jenkins, Azure DevOps, and TeamCity.
Key security: SignPath says private keys are stored in FIPS-compliant HSMs and are never exposed or shared.
Access controls: Role-based access controls define who can sign which artifacts, when, and with which certificate.
Audit and compliance: The platform logs signing requests with the user, file, certificate, policy, and result, and offers exportable reports and optional WORM-style log archiving.
Deployment: SignPath describes its deployment options as SaaS, self-hosted, or hybrid.
Support: SignPath provides a support portal and lists [email protected] as a contact address.
Open source eligibility: Free SignPath Foundation subscriptions require an actively maintained, released project using an OSI-approved open source license without proprietary components.
Audience: The company says it serves customers worldwide, from small development teams to large enterprises.
Founded: 2017
Headquarters: Vienna, Austria
Price from: Free

Where it ranks on The Geeks Club

Best Code Signing Software in 2026#2 of 26

Is SignPath yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SignPath

Sources

signpath.io· checked 29 Sept 2026
signpath.io/platform/features· checked 29 Sept 2026
signpath.io/support· checked 29 Sept 2026
signpath.org/terms.html· checked 29 Sept 2026
signpath.io/company· checked 29 Sept 2026