Skip to content
QuenchWorks

Alternatives/ Bitnami

A free, signed replacement for Bitnami

Broadcom moved the free Bitnami secure-images catalog to a paid model in 2025, leaving teams that built on bitnami/* images and charts looking for a maintained, hardened replacement. QuenchWorks is that replacement: a free, MIT-licensed, clean-room catalog of 0-CVE container images and signed Helm charts. It is built independently from source on Wolfi — not a fork or copy of Bitnami charts — and every claim is yours to verify.

Browse chartsMigrate

QuenchWorks vs Bitnami, feature by feature

Price / free tier

QuenchWorks

Free

Bitnami

Paid

Bitnami Secure Images is commercial; a latest-only hardened community set and a frozen legacy registry remain

Built from source on Wolfi

QuenchWorks

Yes

Bitnami

No

Debian-based hardening, not Wolfi

0-CVE goal with daily rebuilds

QuenchWorks

Yes

Hard Trivy gate; a fixable CVE fails the build

Bitnami

Yes

Near-zero-CVE goal; cadence not publicly specified here

Signed (cosign keyless)

QuenchWorks

Yes

Bitnami

Yes

Signed images

SBOM (SPDX or CycloneDX)

QuenchWorks

Yes

SPDX

Bitnami

Yes

SLSA build provenance

QuenchWorks

Yes

Bitnami

Partial

Attestations vary by offering

Multi-arch (amd64 + arm64)

QuenchWorks

Yes

Bitnami

Yes

Helm charts included

QuenchWorks

Yes

Bitnami

Yes

Behind the paid catalog

Charts pin images by digest

QuenchWorks

Yes

Bitnami

Varies

Not confirmed here

License transparency, clean alternatives flagged

QuenchWorks

Yes

Source-available apps are labeled, with an OSI-clean alternative named

Bitnami

Partial

Open and free to verify

QuenchWorks

Yes

Public images, charts, and build workflows

Bitnami

Partial

Full catalog gated behind a subscription

Conservative on purpose: where a fact about Bitnami could not be confirmed from a primary source, it is marked "Varies" or "Partial" rather than guessed. Verify every claim against Bitnami’s own public sources before relying on it.

Free, signed, and yours to verify.

Browse the catalog or read the source. No account, no registry to add.