Get Started

Minimus for Open Source

Are you an open source maintainer? Minimus provides free access to thousands of hardened images to qualified open source projects. Just fill out the form and we'll be in touch.

With Minimus, you'll get:

  • FedRAMP and FIPS 140-3 ready images, hardened to NIST and CIS standards
  • Custom image creation and supply chain protection
  • Native compliance reporting and signed SBOMs

Have a question? Hate filling out a form? Spin up a Slack chat with us below.

Thank you!
Our team will reach out shortly to set up your Minimus account.
Oops! Something went wrong while submitting the form.
Benefits

Why Choose Minimus

Hardened Image Gallery
Hundreds of secure, minimal container images hardened to CIS and NIST standards
Custom Image Creator
Build images tailored to your specific needs with the Minimus Image Creator
Compliance Dashboards
Native dashboards and audit-ready reporting for NIST, FIPS 140-3, STIG and more
No-Code Actions
Easily integrate and automate action in GitHub, Slack, Jira and other tools
Exploit Intelligence
Real time insight into active exploits with EPSS and CISA-KEV data for all CVEs
Self-Hosted Registry Support
Pull Minimus images from your own registry, including support for fully air gapped environments
Our blog

The Latest Updates From Minimus

Blog and video updates from the Minimus team on application security, all things cloud native, and more.
Guides

Article 21 Compliance: NIS2 Requirements for Container-Based Workloads

Understand NIS2 requirements for container workloads, from supply chain security to CVE management and audit-ready compliance controls.
Debra Hopper
April 20, 2026
Opinions

Turning Back the Tide: Defenders in the Age of AI Vulnerability Research

AI is changing how vulnerabilities are found, not how they’re fixed. Defenders need a new approach: shrinking the attack surface before vulnerabilities exist.
Neil Carpenter
April 19, 2026
Guides

DORA Compliance for Container-Based Workloads: What Financial Sector Engineers Need to Know

DORA compliance for container workloads explained, with practical implementation guidance for platform engineers and ICT vendors.
Debra Hopper
April 19, 2026