Hardened Apache Tomcat servlet container with custom jlink JRE (default webapps removed).
Web Servers & Proxies
Edge and ingress software: web servers, reverse proxies, load balancers and auth gateways, all built to run as a non-root user.
Shell-less Nginx built on Wolfi.
Apache HTTP Server built on Wolfi.
Shell-less Caddy web server built from source via melange.
Shell-less HAProxy built from source via melange.
Shell-less Traefik reverse proxy built from source via melange.
Shell-less Envoy proxy.
Shell-less OAuth2 Proxy (OIDC/OAuth2 authenticating reverse proxy), built from source via melange.
Other categories
Languages & RuntimesDatabasesCaches, Queues & MessagingObservabilityInfrastructureKubernetes, CI & IaCApps
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on the comparison pages.