Chainguard Reviews & Product Details

Their base image support is notable: the images are lean and mostly free from CVEs. They also provide a high range of possibilities and FIPS compliance. Review collected by and hosted on G2.com.

Their UI for reviewing CVE patches feels overwhelming and makes it difficult to locate results for specific packages. The CLI's login flow also lacks clear documentation. Finally, they now rely more on upstream patches for CVE fixes than they did previously, which may be a consequence of the wider range of technologies they support. Review collected by and hosted on G2.com.

Good communication and good support. They are easy to reach whenever I need help. Review collected by and hosted on G2.com.

So far, everything has been fine, and I don’t have anything to complain about. Review collected by and hosted on G2.com.

Reducing CVEs is obviously important, but even more so are the people who work there and the support they provide. They genuinely care about helping their clients get the most out of their products and services. Review collected by and hosted on G2.com.

Honestly, I cant think of anything that I dislike about them. Review collected by and hosted on G2.com.

They’ve delivered on their promise of hardening images to a near-zero CVE posture. The web catalog experience is seamless, easy to navigate, and genuinely useful. On top of that, my support requests have been answered promptly. Review collected by and hosted on G2.com.

Pricing has changed over the years and has been expensive at times, but I think it’s on the right track now. That said, updates to an image can sometimes be slow, which can be a bit frustrating. Review collected by and hosted on G2.com.

I appreciate Chainguard's comprehensive library of patched packages and their prompt responsiveness when we need quick fixes. I love their training and community building efforts; I always leave sessions feeling well-informed and better prepared for my job. It's also very easy to get access and create an API key, which adds to the convenience of using Chainguard. Review collected by and hosted on G2.com.

Nothing, I love their service and solutions. Review collected by and hosted on G2.com.

The fast CVE remediation requires a minimal images.

The well-thought-out authentication flow for CLI and a simple, but complete interface. Review collected by and hosted on G2.com.

The login flow is generally fine, but from time to time I get a “something went wrong” message on the Auth0 page. It doesn’t happen often, and it’s not a big deal. Review collected by and hosted on G2.com.

Easy access to images. Recognized the quality of images Review collected by and hosted on G2.com.

Would be nice to have API access to the CVE information. Review collected by and hosted on G2.com.

I appreciate how Chainguard reduces CVEs through its secure-by-default model and fast remediation time. I'm impressed by Chainguard's dedication to secure software delivery and its continuous expansion of complementary products. The company exhibits the passion of a startup combined with the dedication of a well-developed organization. I also find it extremely easy to add the nightly downloads to Artifactory and integrate them into GitLab pipelines. Additionally, I use complementary products like libraries, advisories, and soon-to-come agent skills, which are quite beneficial. Review collected by and hosted on G2.com.

I don't like compensating for bad vendor practices like vulnerable code being in library and mod files. While not executable, this causes administrative headaches. Review collected by and hosted on G2.com.

The Chainguard images eliminate or reduce known vulnerabilities. Review collected by and hosted on G2.com.

While the documentation and workflow for images is great, the same for helm charts is sometimes lacking. Review collected by and hosted on G2.com.

Chainguard reduces the total number of vulnerabilities that our team has to spend time patching, both in container images and from open-source libraries. The features that ensure the image dependencies are minimalized and hardened to FIPS and FedRAMP standards are very valuable for us. The initial setup was very easy, allowing us to switch over 50 containers to Chainguard within less than a month. Review collected by and hosted on G2.com.

It takes the team a while to create a new image for a 3rd party tool, if they do at all. Review collected by and hosted on G2.com.