Shell-less Redis built from source via melange.
Caches, Queues & Messaging
Brokers, queues and caches — the stateful middle of most architectures, where a smaller attack surface matters and images are usually long-running.
Shell-less Valkey built from source via melange.
Shell-less Memcached built from source via melange.
Apache Kafka with custom jlink JRE, KRaft mode.
Apache ZooKeeper coordination service with custom jlink JRE.
Hardened Apache Flink stream processing engine with a custom jlink JRE.
Apache Pulsar messaging and streaming server with custom jlink JRE.
RabbitMQ with Wolfi Erlang/OTP.
Shell-less NATS server built from source via melange.
Shell-less Eclipse Mosquitto MQTT broker.
Other categories
Languages & RuntimesDatabasesWeb Servers & ProxiesObservabilityInfrastructureKubernetes, CI & IaCApps
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on the comparison pages.