Develop Secure Self-Hosted Software with Zero-CVE Images

Replicated customers get access to one free language-based SecureBuild base image to bootstrap your application security posture, and the ability to redistribute other SecureBuild images via the Replicated Distribution Platform once subscribed.

Request a demo

The number of CVEs has exploded in the last 5 years and most enterprise customers are scanning images regularly to avoid deploying vulnerable software. As this happens ISVs are feeling the pressure to distribute Zero-CVE versions of their applications. Replicated's SecureBuild offering is the answer.

Replicated's SecureBuild provides ISVs with popular open source images rebuilt from source on trusted hardware. Every image dependency has been fully mapped, and rebuilt with attestations & SBOMs. The resulting0-CVE imagesare then tested and verified as drop in replacements for images that often have 10s or 100s of CVEs.

screenshot of the dashboard on replicated's enterprise portal

A Better Unboxing Experience

Deliver a strong first impression by providing customers with a branded, user-friendly onboarding experience that highlights your product’s value and professionalism.

With language specific, runtime base images (Node, Python, Java, GO, etc.) ISVs can build their proprietary images from a secured foundation with all image level dependencies monitored and updated with the same SLAs. Every Replicated plan includes 1 free subscription to a language specific runtime image.

Industry leading CVE SLAs. 6 Day SLA for critical CVEs and 13 Days for High, Medium and Low. We continuously scan images and update all dependencies, and dependencies of dependencies, when fixes are released upstream.  Don't see an image you need? We can work with you to have it available in a manner of hours.

Ready to distribute. Integrate the SecureBuild registry into your Replicated account and start redistributing these images to your customers with your full application into any environment (VPC, air gap, embedded Kubernetes etc).

Available Now in Alpha!

Deep integration with the Enterprise Portal Security Center to share key security artifacts (CVE scans, SBOMs, and more) with each release for your customers to consume, driving customer transparency, reduced security questionnaire burden, and adoption of newer, more secure versions of your application.

“We want to expand sales to...entities like DOD or other U.S. government types of customers. Those tend to go self-hosted. Our partnership with Replicated is going to help us because we don’t have to self-solve the air gap delivery problem you face with these types of customers.”