Integrations
Publishes where you run. Bakes in what you already use.
Primcoat builds one hardened image and publishes it to each destination you run — and installs the agents you depend on during the build, rather than leaving them to a bootstrap script.
Publish destinations
Where a finished image lands. Primcoat builds one hardened image and publishes it to each destination you target.
AWS
Primcoat builds your hardened image, uploads it to Amazon S3, and registers it as an AMI in every region you deploy to.
Azure
Primcoat builds your hardened image, uploads it to Azure Blob Storage, and registers it as an image version in an Azure Compute Gallery.
Google Cloud
Primcoat builds your hardened image, uploads it to Google Cloud Storage, and registers it as a custom image in your project.
VMware
Primcoat builds your hardened image, uploads it to VMware vSphere, and registers it as a Content Library item.
OpenShift VirtualizationComing soon
Coming soon — Primcoat uploads your hardened image to an OpenShift Virtualization cluster and registers it as a DataVolume.
Hyper-V
Primcoat builds your hardened image, uploads it to an SMB share or SCVMM library, and registers it as a Generation 1 or 2 VM template.
Software catalog
Agents baked into the image at build time, from a curated catalog. Each package is versioned, tested against every supported OS, and validated inside the build.
CrowdStrike FalconComing soon
Security & EDR
Coming soon — bake the Falcon sensor into the golden image from the software catalog, with the customer ID supplied as an encrypted secret that never reaches the image filesystem.
DatadogComing soon
Monitoring
Coming soon — bake the Datadog Agent into the golden image from the software catalog, with the API key supplied as an encrypted secret that never reaches the image filesystem.
The software catalog is broader than the pages above: it also covers SentinelOne, Carbon Black, Defender for Endpoint, Qualys, Tenable, Rapid7, New Relic, Dynatrace, Splunk, Elastic, Puppet, Chef, SaltStack, CyberArk, Vault, SSSD, and the cloud agents for AWS, Azure, and Google Cloud. If something you depend on is missing,tell us.
Get started now.
Request access, describe the image you want, and have your first hardened image in about 15 minutes — a typical estimate, before publishing to your clouds. Primcoat builds, hardens, scans, signs, and publishes it, on the operating systems you already run.