Chainguard
Minimal hardened container images maintained with near-zero known vulnerabilities.
why this verdict
Keep it — Anthropic has not replaced it
Anthropic's version overlaps, but does not finish the security job, so this one is still worth keeping open.
- A named launch, not a vibe named, unlinked
- Docker and cloud providers publishing their own hardened base images at no cost. Anthropic, July 29, 2025 — no announcement link recorded yet.
- How much of the job it covers not the job editorial call
- Parts of it. The job still needs the tool to get finished.
- Is there a free way to do it? yes
- 2 of 3 listed replacements have a usable free tier: Distroless and Alpine Linux.
- What the call is worth nothing to cancel
- No paid entry tier tracked, so there is no subscription to cancel.
- Threatened by
- Anthropic
- Since
- July 29, 2025
- List price
- free
- Per year
- —
The backstory
Chainguard sells container base images stripped of everything unnecessary and rebuilt continuously, so a compliance scan returns almost nothing instead of four hundred findings inherited from a distribution nobody chose deliberately. The value is entirely in the maintenance treadmill rather than the artifact, which is why free hardened images have not displaced it: keeping images at zero known vulnerabilities every day is an operational commitment, and that is the actual product.
Escape hatches
Google's free minimal base images
github.com open_in_newSmall base image, maintained by the community
alpinelinux.org open_in_newOfficial hardened images for common runtimes
docker.com open_in_new2 of 3 replacements have a usable free tier.