Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Mix of feelings
What do you like best about the product?
0 CVE's, Good support, Very good technical team
What do you dislike about the product?
Sometimes we need remind them to update some images
What problems is the product solving and how is that benefiting you?
Boost for FedRamp
- Leave a Comment |
- Mark review as helpful
Good range of base images, great support
What do you like best about the product?
Since adopting Chainguard the number of vulnerabilities our scanning tools have found in our services has dramaticdally decreased. Chainguard also offers a good range of base images and has been able to build custom app images for us.
What do you dislike about the product?
Initial learning curve on how to migrate from standard base images to Chainguard images. We have had issues integrating Chainguard's Docker registry with out artifact storage tool.
What problems is the product solving and how is that benefiting you?
Automating the patching of our base images, so our team doesn't need to worry about it.
Extremely satisfy with Chainguard support
What do you like best about the product?
Chainguard support is excellent and fast. Chainguard images are lean, secure and easy to integrate. Updates are frequent and easy to implement. Users can pull any supported imgages with up-to-date features for frequency of use.
What do you dislike about the product?
Base chainguard images include minimum standard security configurations. Distroless prodution images without shell cause some inconvenience for testing, debugging purposes. Users need to learn different way to search and add packages.
What problems is the product solving and how is that benefiting you?
Using Chainguard container images help minimizing security vulnerabities and attack surfaces.
Easy and positive experience
What do you like best about the product?
Attentive support team
Well documented service
Easy to use portal/UI
Flexible to customizations we requested
Well documented service
Easy to use portal/UI
Flexible to customizations we requested
What do you dislike about the product?
None I can think of.
The limiting factor for chainguard is the upstream product maintenaners speed.
The limiting factor for chainguard is the upstream product maintenaners speed.
What problems is the product solving and how is that benefiting you?
We use chainguard images to reduce vulnerabilities and to support FIPS compliance.
They provide updates to OS packages and product dependencies which takes a singificant effort for product development teams.
FIPS compliance also important for ua to deliver our products to federal government customers/prospects. Chainguard makes it easy for us to maintain FIPS compliance by providing us base FIPS images and 3rd party FIPS images. We don't have to do the research and maintenance on our side.
They provide updates to OS packages and product dependencies which takes a singificant effort for product development teams.
FIPS compliance also important for ua to deliver our products to federal government customers/prospects. Chainguard makes it easy for us to maintain FIPS compliance by providing us base FIPS images and 3rd party FIPS images. We don't have to do the research and maintenance on our side.
Chainguard is very easy to use and deploy
What do you like best about the product?
I was extremely happy with how trivial it was to swap in their FIPS images in place of the FOSS images we were using. They had a whole onboarding call, but we'd already deployed them to development as it was that fast and easy.
What do you dislike about the product?
Their pricing was a battle, they don't differentiate between very simple images and very complex ones, so making the case to use them fully is very difficult. I think a pricing model that more accurately reflects their value add would help, as some images are inherently more complex to replace than others.
What problems is the product solving and how is that benefiting you?
They have FIPS support and vulnerability management via SCA.
Tech is great, and the team is excellent.
What do you like best about the product?
Chainguard has allowed us to develop at speed and scale allowing us to focus on features more than the development overhead, especially in mitigating CVEs. That said, the team that we interact with is the best part of Chainguard. Responsive, intelligent, and customer obsessed is the main reason we value and continue our relationship. Couldn't be happier.
What do you dislike about the product?
There isn't anything we don't like that I can think of.
What problems is the product solving and how is that benefiting you?
Chainguard helps our engineers focus on developing features. Previously, most time was spent trying to mitigate CVEs and our customers were getting new features deployed. Using Chainguard has significantly shifted that paradigm. Developing in the DoD landscape is harder than the private sector and this helps a lot.
We used chainguard base images to
What do you like best about the product?
Using chainguard essentially eliminates container library vulnerabilities coming from our Docker base images (as well as standard package installs!). When we scan our chainguard based images with grype, or snyk, the only vulnerabilities left are from our application installs. We are in the process of implementing chainguard base images across the enterprise, and are expecting over 80% reduction in open vulnerabilities across the board. Chainguard's customer support is excellent, they are one of the best software vendors I have ever worked with.
What do you dislike about the product?
The only real downside is you have to modify your Dockerfiles to work with the Wolfi OS, which is alpine-like (i.e. you have to use apk, etc.) If your current base image is not alpine based, there is some learning curve and work.
What problems is the product solving and how is that benefiting you?
We have a significant backlog of known container vulnerabilities in our containers. Hardening and managing clean base images is a lot of work and takes specialized expertise that our development teams don't have. Changuard provides base images that work out of the box for most of our tech stacks and alleviates the need to manage hardened base images ourselves.
Simplifying security
What do you like best about the product?
Security is hard on its own, and while many vendors focus on selling detection products, Chainguard does the opposite and solve a painful problem with little effort from users.
What do you dislike about the product?
Chainguard offers some free to use images, but only "latest" version and not stable versions. This makes impossible to use as an individual or for open source projects.
What problems is the product solving and how is that benefiting you?
Zero security vulnerability containers.
My experiences using Chainguard Nodejs base image was amazing!
What do you like best about the product?
- Very small image size,
- Very small to none CVEs from my experiences.
- Very large repo supporting many languages and technologies,
- Ease to use,
- Ease of implementation.
- Very small to none CVEs from my experiences.
- Very large repo supporting many languages and technologies,
- Ease to use,
- Ease of implementation.
What do you dislike about the product?
A great part of it, is free, but for some custom implementation or features , you may pay.
What problems is the product solving and how is that benefiting you?
CVEs, better quality software.
Chainguard makes securing applications much easier
What do you like best about the product?
It's simplicity. Changing from a regular Image to use a Chainguard image as the base helps mitigate a lot of vulnerabilities, and it's a change any developer would be able to easily implement.
This is something that I would recommand to any developer or business that is looking to harden their applications. Securing the base image is the first step everyone should take.
This is something that I would recommand to any developer or business that is looking to harden their applications. Securing the base image is the first step everyone should take.
What do you dislike about the product?
I have some uncertaincies about what the support will look like for users using the Developer Free tier in the future. Would like them to sllow all image versions and not just latest/stable for Free Tier.
What problems is the product solving and how is that benefiting you?
Bring simplicity to security. It hardens the application image that our containers use to run.
showing 1 - 10