Secure your
software supply
chain.
Repod is a self-hosted APT repository manager with built-in CVE scanning, CISO approval queue, and NIS2 compliance — all in a single container. No cloud dependency, no licence fees per package.
Built for security teams
Repod ships everything a modern security-conscious organisation needs to control package distribution — no plugins, no add-ons, no surprises.
CISO Review Queue
Every package must pass human approval before reaching production. Dual-control workflow with full audit trail — required for NIS2 and SOC 2.
CVE Scanning
Trivy scans every package for known CVEs at upload time. Results are surfaced in the UI with CVSS scores, affected versions and fix recommendations.
Full Audit Trail
Every upload, approval, rejection and download is logged with timestamp, user identity and IP. Immutable logs ready for external audit export.
GPG Signing
Packages are GPG-signed server-side. Clients receive a public keyring they trust — no manual key management, automatic rotation support.
Role-Based Access
5 built-in roles: Admin, Security Officer, Maintainer, Developer, Reader. Fine-grained permissions at distribution and component level.
Self-Hosted · Air-Gap Ready
Single Docker container, no external SaaS calls. Runs on bare-metal, VM or Kubernetes. Perfect for classified, finance, and healthcare environments.
7-step verification before every deployment
No package reaches production without passing every gate. The pipeline is automatic — humans only intervene at the review step.
Designed for security teams, not just developers
A clean, information-dense UI that gives your CISO real-time visibility without opening a terminal.
Dashboard
Last updated 2 minutes ago
| Package | Version | Distribution | Status | Uploaded |
|---|---|---|---|---|
| nginx | 1.27.3-1 | focal | Approved | 2h ago |
| openssl | 3.0.14-0 | jammy | Pending | 3h ago |
| libssl-dev | 3.0.14-0 | jammy | Scanning | 3h ago |
| curl | 8.7.1-1 | noble | Approved | 5h ago |
| openssh-server | 9.7p1-1 | noble | Rejected | 1d ago |
How Repod stacks up
The only APT repository manager with security-first features built-in — no add-ons, no extra licences.
| Feature | Repod You | Nexus OSS | Artifactory CE | Aptly | Cloudsmith |
|---|---|---|---|---|---|
| APT repository | |||||
| Web UI | |||||
| Built-in CVE scanning | |||||
| AV malware scan | |||||
| CISO review queue | |||||
| GPG auto-sign | |||||
| Audit trail | |||||
| NIS2 compliance mode | |||||
| RBAC (5 roles) | |||||
| Self-hosted / air-gap | |||||
| Single container | |||||
| Open source |
Comparison based on publicly available documentation. Last reviewed May 2026.
Compliance out of the box
Repod maps directly to NIS2 Article 21 requirements. Every action is logged, every package is traceable, every approval is documented — so your audit is ready when the auditor arrives.
Architecture documented for SecNumCloud qualification reviews. Self-hosted deployment with no foreign cloud dependencies meets sovereignty requirements.
Simple, transparent pricing
Start with the community version. Upgrade when your team needs enterprise security controls.
- APT repository hosting
- Package upload (REST API + UI)
- ClamAV antivirus scan
- GPG signing
- Basic web UI
- Single distribution
- Community support
- Everything in Community
- Trivy CVE scanning
- CISO review queue
- Multi-distribution
- Full RBAC (5 roles)
- Immutable audit trail
- NIS2 compliance export
- SecNumCloud documentation
- Priority support & SLA
- On-boarding session
No commitment · 30-day pilot available
See Repod in action
Get a personalised 30-minute walkthrough with a live Repod instance. We'll show you the security pipeline, the CISO dashboard, and how to deploy in your environment.