Docker Hardened Images: Free Security for All Developers

Since December 2023, Docker Hardened Images (DHI) have been available at no cost, ensuring secure, minimal container images are the default for every developer. This move eliminates the need for costly, complex security solutions, making robust container security accessible to all.

Why Docker Hardened Images Matter

Docker’s approach balances flexibility with security. Unlike proprietary alternatives, DHI is built on open-source foundations like Alpine and Debian. This means teams can maintain their preferred distributions while benefiting from hardened security. No forced changes—just enhanced protection for what you already use.

Key Benefits of DHI

Multi-distro support: Works seamlessly with Alpine, Debian, and more.
Open-source transparency: Built on trusted, community-driven platforms.
Zero-cost security: Free for all developers, with no hidden fees.

Expanding Security with System Packages

Today, Docker takes security deeper with Docker Hardened System Packages. These packages are source-built, cryptographically attested, and backed by an SLA. They extend the same security guarantees to every layer of your container stack, ensuring consistent hardening across environments.

How It Works

Packages are built from source by Docker, with verified patches.
Cryptographic attestation ensures provenance at every step.
SLA-backed updates deliver rapid CVE remediation across your fleet.

Real-World Impact

Organizations like n8n.io, Medplum, and Adobe have adopted DHI for production workloads. Medplum, which manages data for 20+ million patients, standardized on DHI for its security and reliability. These examples highlight how DHI meets teams where they are, without compromising on safety.

Enterprise-Grade Security Made Accessible

Docker simplifies access with DHI Community (free, Apache 2.0-licensed images) and new pricing tiers:

DHI Select: $5,000 per repo for SLA-backed security.
DHI Enterprise: Customizable, with 5-year lifecycle support.

Building a Secure Future

Docker’s vision is a world where security is embedded by default. With near-zero CVEs in DHI images and rapid vulnerability fixes, teams can focus on innovation, not remediation. The roadmap includes expanding Alpine and Debian package coverage, pushing toward one-day critical patch cycles.