🤝 Minimus is joining Echo.

Minimus is joining Echo

Minimus is winding down operations, and key Minimus technology and assets have been acquired by Echo.

We chose Echo because we believe they offer the strongest path forward for both the technology we built and, most importantly, our customers. We are working closely with the Echo team and will be meeting with every Minimus customer to provide necessary support during the transition period.

You can learn more about Echo here

Why Echo?

Minimus and Echo were built around the same fundamental idea: security should be built into the software you use, not added after the fact.

With Echo, you’ll get:

Hardened software without changing how you build: Drop-in replacements designed to fit into your existing environments and workflows.
More than an OS: Hardened container images, libraries, OS packages, VMs, Helm charts, and more from one platform.
Continuous security: Echo continuously vets, maintains, and patches its artifacts as new vulnerabilities and threats emerge.
Broad ecosystem support: Integrations across the security and registry tools enterprises already use.

A message from Minimus

“When we made the decision to wind down Minimus, our priority was finding the right home for the technology we built and, most importantly, the right path forward for our customers.

Echo shares our belief that software should be secure by default and has built the platform and engineering capabilities to take that vision even further. We’ve spent time working directly with their team, and we’re confident both in their technology and the people behind it.

We believe Echo is the best place for what we built to continue – and the best path forward for our customers.”

Ben Bernstein

CEO, Co-founder, Minimus

Hardened images, ready to pull

Choose one of our most popular images or browse our massive catalog of minimal, ~0 CVE images and pull yours.

Everything you need to ship secure software

Minimal images, maximum flexibility, fastest path to deployment.

Security

Zero-CVE images, rebuilt daily

Every image is scanned, hardened, and shipped clean. If a CVE drops at 3am, we're already patching, so you don't have to.

24 hour SLA for critical and high CVEs on KEV; 48 hours for all other critical and high
Continuous scanning across thousands of images
SBOMs and signatures for every build

Efficiency

A fraction of the size, none of the bloat

Strip everything non-essential. Smaller images mean faster pulls, fewer dependencies, and a dramatically smaller attack surface.

Often 95% smaller than standard images
Image creator to customize images if you need to, optimized for agents and automation
Faster CI/CD and cold starts

Compliance

Audit-ready from the start

FedRAMP, NIST 800-190, SLSA Level 3, SBOM, CIS, and FIPS. Every image, every build the work auditors ask about? Already done.

FedRAMP-ready images out of the box
SBOM + provenance attestations included
Continuous SLSA Level 3 compliance

Adoption

Change one line. That’s it

Minimus images are API-compatible with what you already run. Update your Dockerfile, rebuild, and ship. No refactoring, no surprises.

Drop-in replacements for standard base images
Continuously maintained Helm charts to deploy complex apps with multiple images
Agent ready with prebuilt skills, prompts, agent config files, and CLI tools so agents can help you migrate and deploy

Loved by security and platform teams

"Minimus solves the ultimate trade-off in cloud development. By stripping away legacy bloat and pre-installed tools, they deliver a hardened, distroless foundation that eliminates CVE noise without slowing developers down. It proves you can achieve top-tier security compliance while actually accelerating engineering velocity."

"With Minimus, we’ve drastically minimized our attack surface and reduced container CVEs to near zero without slowing down our development cycles. It gives our engineering team the peace of mind to ship code fast, knowing our foundation is inherently secure."

"As AI accelerates the threat landscape, legacy security models are falling behind, forcing organizations to change their approach. If you are looking for a way to make that transition, Minimus is a solution to consider trying out. Their secure-by-design model deprives attackers of their favorite tools, providing the clean foundation teams need to target a near-zero CVE posture right from the start."

"Balancing rapid innovation with rigorous cybersecurity standards is a constant challenge. Minimus solves this by delivering secure, hardened container images right out of the box, ensuring infrastructure remains lean, compliant, and highly resilient."

"Minimus eliminates the container vulnerability problem at the source rather than giving engineers an endless list of alerts to triage. Their minimal, distroless images fundamentally break the attacker's operational path while giving software teams their time back."

"Security should be built in, not bolted on. Partnering with Minimus let us stop playing whack-a-mole with inherited vulnerabilities and start delivering a genuinely cleaner, safer foundation for every customer running Camunda in their own environment."

Start free. Scale when you're ready

Open access to hardened images for everyone. Upgrade for private builds, SLA-backed support, and the controls enterprise teams need.

Community

For individuals exploring secure container images.

Get Started

What's included:

1,000s of near 0 CVE images built from source
FIPS, CIS, NIST, STIG compliant images
Agent optimized for rapid adoption
All images, Major versions, Minor versions

Enterprise

For teams shipping production at scale.

Custom

Let's Talk

Everything in Community, plus:

Best in industry, contractually guaranteed, CVE remediation
24x7 enterprise support with contractually guaranteed SLAs
Image creator to define custom images backed by the same SLAs
Actions to integrate with the tooling you already use like GitHub, Slack, and webhooks
Supply chain protection
Enterprise SSO and RBAC for unlimited users
Sync images to the registries you already use, even air-gapped ones
AI ready with skills and config tools for Claude, Codex, Cursor, and more to migrate to and build on Minimus images