CHAINGUARD VMS

Secure,
purpose-built virtual machine images

Deploy containers on hardened, minimal VM images — rebuilt from source daily to ensure zero known CVEs — optimized for ephemeral workloads across cloud and on-premise environments.

4.8 Stars on G2

The world’s leading companies trust Chainguard

The security and innovation-friendly container host has arrived

Simplify continuous compliance

Meet critical compliance controls by default with zero-CVE Container Hosts, Application, and Base images guarded under a CVE remediation SLA.

Engineering should build, not patch

Focus on differentiated product experiences and reduce the burden on engineering and security teams for CVE triage, management, and remediation.

Innovate without big bang upgrades

Benefit from the latest features, security updates, and performance optimizations from upstream maintainers without costly and complex major upgrades.

Purpose-built, use-case optimized

Shrink your attack surface without compromising performance with VMs that include only components required to run your containerized applications and support ephemeral cloud-native workloads.

Continuously rebuilt and updated from source

Benefit from newly available features, software upgrades, and a best-in-class CVE remediation SLA of 7 days for critical and 14 days for high, medium, and low through automated rebuilds.

Standardized for multi-cloud

Build on Chainguard VMs optimized for one-click deployments into the cloud of your choice or on-premise environment, with end-to-end integrity for every software component included in your virtual machines.