AI is changing how vulnerabilities are found, not how they’re fixed. Defenders need a new approach: shrinking the attack surface before vulnerabilities exist.
What near zero CVE images are and are not, why they matter for security and compliance, and how to get there with multi-stage builds, scanning, SBOMs, and VEXs.
Monitor platform access, token changes, and custom image activity with the Minimus Activity Log. Built-in visibility and auditability for hardened images.
Minimal distroless images offer more than security benefits. Smaller images cut infrastructure costs, speed CI/CD, and improve performance across environments.
Build Zero Trust from the image up. Minimus hardened containers deliver verifiable builds, minimal attack surface, and signed artifacts for a secure foundation.
Learn what a Cryptographic Bill of Materials (CBOM) is, how it complements SBOMs, and why cryptographic visibility matters for container image security.
Learn why distroless images are more secure and how to migrate from distro-based images to distroless with Minimus, without breaking existing workflows.
What happened and how Sha1-Hulud 2.0 works: a second-gen supply chain worm infecting npm packages, harvesting credentials, and replicating across GitHub.
MinIO announced they will no longer publish free Docker images to Docker Hub. For teams affected by these changes, Minimus provides a secure MinIO alternative.
Build custom minimal container images from hardened base images and 20k+ packages - with the security, updates, and compliance benefits of all Minimus images.
Mean Time to CVE reframes container security metrics by focusing on the frequency of new vulnerabilities, instead of just amount, to better predict future risk.
Bitnami has moved most images and Helm charts behind a paywall. Learn what’s changing, how to navigate it, and explore Minimus as a drop-in alternative.
Learn about popular open source vulnerability scanners, and how using them alongside secure base images like Minimus simplifies vulnerability management.
Minimus customers can now view at an image level, or across their environment, the specific compliance regimes and controls image configurations are mapped to.
VEX in Minimus gives teams a clear picture of which vulnerabilities impact them and helps reduce time and manual work required to confirm vulnerability status.
Minimus container images are now publicly available on Iron Bank, the U.S. Department of Defense's repository of digitally signed, hardened container images.
We’re excited to announce a new partnership with Wiz. Combine Wiz’s comprehensive visibility with Minimus’s secure-by-default images for end-to-end security.
Secure your software supply chain with Minimus: trusted container images, real-time threat intelligence, and full visibility for developers and security teams.
Minimus' vulnerability intelligence helps you assess risk, prioritize action, and maintain visibility with detailed advisories and per-image CVE tracking.
Automate workflows and stay informed with Minimus Action Providers. Trigger alerts, scans, and updates across your tools when container changes happen.
In this week’s release, we’ve focused on improvements to our actions, advisories, integrations, as well as updating the frontend of the Minimus web console.
Simplify FedRAMP compliance with Minimus: secure, minimal container images, automated remediation, and full compatibility with air-gapped environments.
Yoav Leitersdorf and Ben Bernstein discuss the story behind Minimus, their vision for security, and key insights from their journeys as founders and leaders.
Standard Nginx images often include unused packages that introduce hidden vulnerabilities. Learn how using a minimal nginx image can reduce your attack surface.
CVE remediation combines CVSS, EPSS, and CISA KEV signals to prioritize fixes. Learn the lifecycle, container-specific workflows, and tools that work in 2026.