Features
Secure code signing for your organization
Signotaur is a self-hosted code signing server that keeps your private keys secure while enabling seamless integration with your CI/CD pipelines. Explore all the features that make Signotaur the trusted choice for secure code signing.
Your private keys never leave the server
Signotaur is designed with security as the top priority. Your private signing keys remain securely stored on the server, while build systems request signatures through a secure API. No more distributing certificates to build machines.
Seamless pipeline integration
Integrate code signing into your existing CI/CD workflows without exposing private keys. The REST API and command-line client make it easy to sign artifacts from any build system.
Manage all your certificates in one place
Signotaur supports multiple certificates for different projects, environments, and signing types. Manage OV and EV certificates, Windows Store signing, and standard PFX files all from a central location.
Enterprise-grade security features
Everything you need to secure your software supply chain.
Timestamp Support
Automatic timestamping ensures signatures remain valid after certificate expiry.
HSM Integration
Hardware security module support for maximum key protection.
Supply Chain Security
Protect your software supply chain with secure, centralized signing.
Multiple Projects
Support for multiple projects with isolated certificates and permissions.
Role-based permissions
Control who can sign with which certificates using fine-grained access controls. Administrators can manage users, create API keys, and assign permissions to ensure only authorized personnel can sign code.
Flexible signing for every need
Signotaur supports a wide range of signing scenarios including Windows Authenticode, ClickOnce manifests, VSTO add-ins, and NuGet packages. Sign your software with confidence.
Complete audit trail
Every signing operation is logged for compliance. Track who signed what, when, and with which certificate. Generate reports for audits and maintain a complete history of all signing activity.
And much more
Signotaur includes everything you need for secure code signing.
Fast Signing
Optimized for performance with parallel signing capabilities.
Windows Service
Runs as a Windows service for reliable, always-on operation.
REST API
Comprehensive API for integration with any automation platform.
Secure Transport
TLS encryption for all communication with the signing server.
Ready to try Signotaur?
Download a free 30-day trial and experience secure, self-hosted code signing.