ZenoRegistry

6.3easy start · #19 of 53
in Container Registries

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, self-hosted, Web.

Visit site Alternatives

ZenoRegistry is ranked #19 of 53 in container registries on The Geeks Club. It runs on API, Self-hosted, Web.

ZenoRegistry plans and pricing

All plans

Self-hosted licence Not published Contact for licence; no per-seat fees stated citiumsoftware.com · 4 Oct 2026

Compared on container registries

OCI artifacts: Yes
Retention policies: Yes

Best ZenoRegistry alternatives

See all 20

Inedo ProGet 0 of 4 in the starter kit Lesson 17.9 JFrog Container Registry 0 of 4 in the starter kit Lesson 27.8 8gears Container Registry 0 of 4 in the starter kit Lesson 37.7 Chainguard Registry 0 of 4 in the starter kit Lesson 47.7 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 KakaoCloud Container Registry 0 of 4 in the starter kit Lesson 67.2

The record

Purpose: ZenoRegistry is a self-hosted, OCI-compliant container registry for internal enterprise use.
Deployment: The server, OCI API, admin REST API, and embedded admin UI ship in one Go binary; PostgreSQL and S3-compatible object storage are its runtime dependencies.
OCI support: It implements OCI push, pull, tag listing, catalog, chunked uploads, cross-repository blob mounts, and manifest deletion, and the page names Docker, Podman, and nerdctl as compatible clients.
Storage integrations: Its S3-compatible storage driver works with AWS S3, MinIO, Ceph, DigitalOcean Spaces, Scaleway Object Storage, and other S3-compatible services.
Identity integrations: Admin dashboard SSO supports OIDC providers including Keycloak, Entra ID, Google Workspace, Authentik, Okta, and Dex; local admin is available as an emergency option.
Access control: It provides pull, push, and admin roles, with JWT scopes checked per repository and action on OCI requests.
Image retention: Retention policies can keep a specified number of recent tags or tags within a specified age, protect glob patterns, and enforce a per-repository safety floor; dry-run previews are available.
Supply chain: The registry recognizes Cosign signatures, attestations, SBOM sibling tags, and multi-architecture references, and excludes signatures and SBOMs from retention deletion.
Security controls: The page describes bearer JWTs, HTTP-only SameSite=Lax admin session cookies, bcrypt password hashing, configurable token lifetime, native TLS, and OIDC login.
Operations: It includes a dependency-free health endpoint, graceful shutdown, structured JSON logs, automatic PostgreSQL migrations, and Kubernetes deployment guidance.
Integrations: The page says Argo CD and Flux can pull from ZenoRegistry and that it ships as a core service in the ZenoKube sovereign cloud platform.
Intended users: The maker describes it for internal platform teams, sovereign or air-gapped deployments, GitOps, Cosign supply-chain workflows, and organizations seeking a self-hosted alternative to SaaS registries.
Support: The maker invites customers to contact it for a demo, managed deployment, or self-hosted licence; its contact page says inquiries receive a response within 24 hours on business days.
Company location: Citium Software describes its European roots as being in Denmark, and its contact page lists Denmark, European Union.

Where it ranks on The Geeks Club

Best Container Registries in 2026#19 of 53

Is ZenoRegistry yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ZenoRegistry

Sources

citiumsoftware.com/products/zenoregistry· checked 4 Oct 2026
citiumsoftware.com/contact· checked 4 Oct 2026
citiumsoftware.com/about· checked 4 Oct 2026