Compare TLM Plans

Software Trust Manager Pricing

Three subscription plans designed for development teams of every size to govern software integrity and protect signing keys. Scale governance, automation, and remediation as your software business grows.

Choose the best plan for your business.

Foundational Trust

Essentials

Best for developers and startups that need to sign code securely.

Minimum 500 to start.
Starting at
$0 / month
12 month auto-renewing subscription $1,000.00
Actions

OPTIONAL ADD-ON

Need More HSM Keypairs?

Unit price per keypair

1

Key features

  • Assign 1 user per keypair
  • Connect up to 1 GitHub repository
  • Providing signing for 3 active releases

Essentials includes

  • Public trust code signing keypair
  • Secure key storage in cloud HSM
  • Visibility into release vulnerabilities
  • Email and GitHub alert notifications
Centralized Control

Advanced

Best for growing teams that need centralized signing control, automated workflows, and vulnerability monitoring.

 

Choose Advanced for:

  • Public and private trust code signing
  • Signature audit logs
  • Test or manifest signing
  • Advanced cryptographic algorithms beyond RSA
  • Vulnerability monitoring
Actions
Contact sales

OPTIONAL ADD-ON

Need More HSM Keypairs?

Unit price per keypair

1

Advanced includes everything in Essentials, plus:

  • Assign up to 10 signers per keypair
  • Connect up to 100 GitHub repositories
  • Provide signing for 10 active releases per repository
  • Management of public and private trust code signing keypairs
  • Single sign-on (SSO)
  • Signature and activity audit logs
  • Continuous monitoring of release vulnerabilities
Ultimate Assurance

Premium

Best for organizations that require code signing and release governance, automation for high volume signing, vulnerability monitoring and remediation support.

 

Choose Premium for:

  • Release automation acceleration for signing in high volume
  • More ways to control access
  • Vulnerability remediation insights
  • Container signing
  • Connection to on-premises HSMs
Actions
Contact sales

OPTIONAL ADD-ON

Need More HSM Keypairs?

Unit price per keypair

1

Premium includes everything in Advanced, plus:

  • Unlimited signers per keypair
  • Unlimited GitHub repository connections
  • Provide signing for 50 active releases per repository
  • High volume signing efficiency with bulk and selective signing
  • Container and Apple file signing
  • Cloud and on-prem HSM hybrid storage capability (Private CA license required)
  • Team-based access control and SCIM ‚Ä®(Coming Soon!)
  • Vulnerability prioritization and remediation insights
  • GPG PKI, key rotation, or dynamic keys
  • Dedicated technical support

All Software Trust Manager Plans provide:

Centralized signing governance

Manage certificates, keypairs, and access in one location and control signing globally.

Release pipeline automation

Don’t let manual action slow your flow. Automate your signing process with APIs, CLI, and CI/CD integrations.

Secure key storage

Private keys are protected in a FIPS 140-2/CC EAL 4+ compliant cloud HSM.

Capabilities

Govern signing across every artifact, tool, and team. Manage release security
even after deployment. 

Govern every release

Define who can sign, what they are permitted to sign, and which policies and security requirements must be satisfied.

  • Enforce standard release controls across repositories, tools, teams, and environments
  • Apply access, separation of duties and approval requirements
  • Manage certificates, keypairs, and policies
Govern every release

Automate secure workflows

Integrate signing and release controls into the tools developers already use, reducing manual work without weakening governance.

  • Automate signing within CI/CD pipelines.
  • Sign containers, binaries, firmware, and other software artifacts
  • Integrate through CLI, APIs, plug-ins, and native integrations
  • Sign multiple files 20x faster using Bulk Signing with retry and delay
  • Efficiently complete releases by signing only artifacts that have not been signed
Automate secure workflow

See and prove what ships

Gain visibility into software signing activity, release status, vulnerabilities, and software components before and after release.

  • Trace signing activity to a user, time, policy, and project
  • Monitor release vulnerabilities and receive notifications when release risk changes
  • Track what has been signed and what remains unsigned
  • Maintain evidence for audits, investigations, and compliance reporting
See and prove what ships

Connect with an expert to choose a Software Trust Manager plan

Select all that apply
Primary Use case(s) ▼
* Required fields.
By supplying my personal information and clicking submit, I agree to receive communications about DigiCert products and services, and I agree to DigiCert and its affiliates processing my data in accordance with DigiCert's Privacy Policy.

  • DigiCert Logo

    DigiCert is a global leader in intelligent trust, securing people, data, and devices with AI-powered solutions built to stop threats today and prepare for a quantum-safe future.