Docker Makes 1,000+ Hardened Container Images Free Under Apache 2.0

Docker has made its catalogue of more than 1,000 hardened container images freely available under the Apache 2.0 license. Previously a commercial offering launched in May 2025, Docker Hardened Images are now accessible to all developers.

Security by Default

The hardened images are built on Debian and Alpine Linux distributions, designed to reduce attack surfaces by eliminating unnecessary components such as package managers and shells. Images run as non-root users by default, addressing one of the most common container security misconfigurations.

Supply Chain Security

Each hardened image includes complete software bills of materials (SBOMs), transparent vulnerability data, and cryptographic proof of authenticity with SLSA Build Level 3 provenance. This comprehensive documentation enables organizations to verify exactly what's running in their containers.

AI-Assisted Migration

Docker has extended its AI tool, the Docker AI Assistant, to scan existing containers and recommend equivalent hardened images. This automation simplifies the migration path for organizations looking to improve their container security posture without manual image auditing.

MCP Server Hardening

Docker is extending its hardening methodology to Model Context Protocol (MCP) servers, recognizing the growing importance of securing AI agent infrastructure. This expansion addresses emerging security needs as agentic AI becomes more prevalent in production environments.