Snapshot 258065
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Chainguard security@chainguard.dev Privacy PolicyOpens in new tab Trusted Source for Open Source We are committed to safeguarding our customers' data through industry standards, compliance certifications, and third-party audits. In limited cases, when acting as a processor for customers pursuant to their request or instructions, Chainguard may engage subprocessorsOpens in new tab to carry out specific processing activities to deliver our services. Reporting Security Concerns Please review the Inbound Vulnerability Disclosure PolicyOpens in new tab before sending a report. We do not participate in a bug bounty program. If you find an issue in our products or sites, report it to our team using the email below. Compliance SOC 2 Type 2 ISO 27001:2022 UK Cyber Essentials GDPR CCPA SLSA Resources View all Compliance SOC 2 Type II SOC 2 Type II Bridge Letter 2026 SLSA Build Level 3 Assessment Report - Chainguard Container Images View 1 more Penetration Tests Pentest Cloud Infrastructure 2026 Pentest External Network 2026 Vulnerability Disclosure Inbound Vulnerability Disclosure Policy Opens in new tab Outbound Vulnerability Disclosure Policy Opens in new tab Commitments DISA STIG Commitment Opens in new tab FIPS Commitment Opens in new tab One Year Later: Signing CISA’s Secure by Design Pledge Opens in new tab View 1 more Subprocessors Subprocessors Opens in new tab Other resources HECVAT Chainguard's Hardening Guide Opens in new tab Business Continuity and Disaster Recovery Exercise Summary - August 2026 Controls Data collected Employee personally identifiable information Credit card information Personal health information Subprocessors View all Amazon Web Services • Cloud provider United States https://aws.amazon.com/Opens in new tab Anthropic (Claude AI) • LLM and AI United States https://claude.com/Opens in new tab Cloudflare • Content delivery services United States https://www.cloudflare.com/Opens in new tab Google Cloud Platform • Cloud service provider and AI United States https://cloud.google.com/Opens in new tab FAQ Updates View all Compliance SLSA Build Level 3 Independent Assessment Completed Published September 1, 2026 Coalfire has completed an independent third-party assessment of the Chainguard Container Images build path against SLSA Build Track Level 3. The assessment covered provenance generation and signing, build platform access controls, build isolation, and traceability, and included a live validation session executed against a production build. All 24 assessed controls were found satisfied. The full report is available under NDA in the Compliance section. Compliance Added CAIQ v4.0.2 Published June 27, 2025 A completed copy of the CAIQ v4.0.2 was uploaded to the compliance section. Compliance Added Higher Education Community Vendor Assessment Toolkit (HECVAT) Document Published June 12, 2025 Uploaded a completed Higher Education Community Vendor Assessment Toolkit (HECVAT) document for higher education customers. General Vulnerability Disclosure Policies Published March 5, 2025 Links to the Inbound Vulnerability Disclosure Policy were added to: The Trust Center header section The Resources section The FAQ section Links to the Outbound Vulnerability Disclosure Policy were added to: The Resources section The FAQ section Media View all Introduction to Chainguard Images Demo | Chainguard Opens in new tab In this video, we talk about Chainguard Images, and how it can help you achieve your business goals by reducing vulnerabilities. How Chainguard Creates Container Images with Low-to-No CVEs Opens in new tab In this video, we go over how we are able to create container images with low-to-no CVEs, and how you can utilize them.