The fast CVE remediation requires a minimal images.

The well-thought-out authentication flow for CLI and a simple, but complete interface. Review collected by and hosted on G2.com.

The login flow is generally fine, but from time to time I get a “something went wrong” message on the Auth0 page. It doesn’t happen often, and it’s not a big deal. Review collected by and hosted on G2.com.

Easy access to images. Recognized the quality of images Review collected by and hosted on G2.com.

Would be nice to have API access to the CVE information. Review collected by and hosted on G2.com.

I appreciate how Chainguard reduces CVEs through its secure-by-default model and fast remediation time. I'm impressed by Chainguard's dedication to secure software delivery and its continuous expansion of complementary products. The company exhibits the passion of a startup combined with the dedication of a well-developed organization. I also find it extremely easy to add the nightly downloads to Artifactory and integrate them into GitLab pipelines. Additionally, I use complementary products like libraries, advisories, and soon-to-come agent skills, which are quite beneficial. Review collected by and hosted on G2.com.

I don't like compensating for bad vendor practices like vulnerable code being in library and mod files. While not executable, this causes administrative headaches. Review collected by and hosted on G2.com.

The Chainguard images eliminate or reduce known vulnerabilities. Review collected by and hosted on G2.com.

While the documentation and workflow for images is great, the same for helm charts is sometimes lacking. Review collected by and hosted on G2.com.

Chainguard reduces the total number of vulnerabilities that our team has to spend time patching, both in container images and from open-source libraries. The features that ensure the image dependencies are minimalized and hardened to FIPS and FedRAMP standards are very valuable for us. The initial setup was very easy, allowing us to switch over 50 containers to Chainguard within less than a month. Review collected by and hosted on G2.com.

It takes the team a while to create a new image for a 3rd party tool, if they do at all. Review collected by and hosted on G2.com.

I like that Chainguard provides secure images for our Kubernetes platform, which means fewer security issues to deal with personally. I appreciate that the images are readily available and updated frequently, and I find it easy to request missing images or updates. Setting up my login and the credential helper was very easy too. Review collected by and hosted on G2.com.

Nothing comes to mind. Review collected by and hosted on G2.com.

Chainguard zero- and minimum-vulnerability containers help us deliver secure services and products to our customers with less effort and reduced cybersecurity risk. These containers are a 1-to-1 replacement for existing publicly available containers, and they integrate easily into our development pipelines with no additional effort. Review collected by and hosted on G2.com.

Chainguard containers are expensive. However, when I consider how many staff hours go into building and maintaining hardened, low-vulnerability containers for applications, the cost does pay off. Review collected by and hosted on G2.com.

Since we work with a lot of classified data, being able to resolve CVEs in minutes through your vast catalog of certified package version checks has saved our developers time. It lets us focus on what really matters: the end product, rather than compliance. Review collected by and hosted on G2.com.

I’m working on onboarding all of our packages to use Chainguard services, and I’m realizing that there are some packages you don’t currently provide. Because of that, finding a workaround is taking some time. Review collected by and hosted on G2.com.

Having someone else manage security patches is quite valuable to my small team. Review collected by and hosted on G2.com.

Sometimes unclear how vulnerabilities are triaged or resolved in a timely fashion. Some of the underlying compatibility shims play havok with our security scanners. Review collected by and hosted on G2.com.

I like the hardened images and their support for debugging and other channels. I appreciate the vLLM and OSS support along with the images that we need major upgrades for. I also like their release cadence and find their customer support to be good. I value the minimal, hardened, continuously patched base images that work with vLLM, which has a fast release cadence and evolving dependencies. I also like the immutable image tags, SBOM, and continuous rebuild features. Review collected by and hosted on G2.com.

I find the lack of easy migration guides and more FDE support frustrating. Also, the initial setup was problematic for GPU services as core NVIDIA images are not supported. Review collected by and hosted on G2.com.