Chainguard Containers provide a trusted set of minimal, zero-CVE container images with a top-tier CVE remediation SLA—addressing critical vulnerabilities within 7 days, and high, medium, and low within 14—enabling teams to build and deploy software more confidently.
As modern development workflows and CI/CD pipelines depend on secure, up-to-date containers for cloud-native applications, Chainguard offers streamlined images built entirely from source in a hardened, secure build environment. Designed for both engineering and security stakeholders, Chainguard Containers reduce the manual overhead of managing vulnerabilities, improve application resilience by shrinking the attack surface, and accelerate go-to-market by simplifying alignment with compliance standards and customer security expectations.
Learn more
Fully managed compute platform to deploy and scale containerized applications securely and quickly. You can write code in your favorite languages, including Go, Python, Java Ruby, Node.js and other languages. For a simple developer experience, we abstract away all infrastructure management. It is built upon the open standard Knative which allows for portability of your applications. You can write code the way you want by deploying any container that listens to events or requests. You can create applications in your preferred language with your favorite dependencies, tools, and deploy them within seconds. Cloud Run abstracts away all infrastructure management by automatically scaling up and down from zero almost instantaneously--depending on traffic. Cloud Run only charges for the resources you use. Cloud Run makes app development and deployment easier and more efficient. Cloud Run is fully integrated with Cloud Code and Cloud Build, Cloud Monitoring and Cloud Logging to provide a better developer experience.
Learn more
OmniOS
OmniOS is an open-source server operating system designed to include only essential features. Its native file system, ZFS, integrates a volume manager with robust data integrity protections. You can effortlessly share volumes using protocols like iSCSI, CIFS, and NFS. Additionally, OmniOS allows the execution of lightweight virtual machines running either OmniOS or Linux in containers, eliminating the traditional hypervisor's overhead while ensuring complete resource management. For those needing full hardware virtualization, it supports bhyve and KVM, allowing the operation of various guest systems including Microsoft Windows and FreeBSD. Network infrastructure can be virtualized through Crossbow, which offers virtual interfaces and switches, plus the option to allocate dedicated resources for specific applications. DTrace serves as a powerful dynamic tracing framework to facilitate troubleshooting across the software stack, enabling real-time instrumentation whenever needed. As an open-source project, OmniOS is self-hosting and its development is actively managed on GitHub, where contributors can submit pull requests, and anyone interested can access the source code to compile their own version of OmniOS. This environment fosters community involvement and transparency in the development process.
Learn more
AWS Fargate
AWS Fargate serves as a serverless compute engine tailored for containerization, compatible with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS). By utilizing Fargate, developers can concentrate on crafting their applications without the hassle of server management. This service eliminates the necessity to provision and oversee servers, allowing users to define and pay for resources specific to their applications while enhancing security through built-in application isolation. Fargate intelligently allocates the appropriate amount of compute resources, removing the burden of selecting instances and managing cluster scalability. Users are billed solely for the resources their containers utilize, thus avoiding costs associated with over-provisioning or extra servers. Each task or pod runs in its own kernel, ensuring that they have dedicated isolated computing environments. This architecture not only fosters workload separation but also reinforces overall security, greatly benefiting application integrity. By leveraging Fargate, developers can achieve operational efficiency alongside robust security measures, leading to a more streamlined development process.
Learn more
