Hardened Apache Flink stream processing engine with a custom jlink JRE.
Hardened Caches, Queues & Messaging container images
Brokers, queues and caches — the stateful middle of most architectures, where a smaller attack surface matters and images are usually long-running.
Apache Kafka with custom jlink JRE, KRaft mode.
Shell-less Memcached built from source via melange.
Shell-less Eclipse Mosquitto MQTT broker.
Shell-less NATS server built from source via melange.
Shell-less NSQ realtime distributed messaging platform, built from source via melange.
Apache Pulsar messaging and streaming server with custom jlink JRE.
RabbitMQ with Wolfi Erlang/OTP.
Shell-less Redis built from source via melange.
Shell-less Valkey built from source via melange.
Shell-less Kvrocks Redis-compatible store on RocksDB built from source.
Apache ZooKeeper coordination service with custom jlink JRE.
Other categories
Languages & RuntimesDatabasesWeb Servers & ProxiesObservabilityInfrastructureKubernetes, CI & IaCApps
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on thecomparison pages.