SecureBuild – Zero-CVE Images That Pay OSS Projects

Hacker News

We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated ( https://news.ycombinator.com/item?id=9841243 ) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable security and scanning. SecureBuild is our attempt to bridge that gap. Built on top of Wolfi ( https://news.ycombinator.com/item?id=36489847 ), we provide Zero-CVE container images with tight SLAs, full SBOMs, etc, but we route 70% of direct subscription revenue back to the open source projects that create them. We’re especially interested in partnering with open source maintainers who want to make their projects more secure and sustainable without changing licenses. We handle builds, hosting, sales, patching, and customer delivery. I'm Grant ( https://news.ycombinator.com/user?id=grantmiller ), co-founder of Replicated & co-creator of SecureBuild, working with my co-founder Marc Campbell ( https://news.ycombinator.com/user?id=marcc ). We hope this can be part of a broader push toward a more secure, economically sustainable future for open source. Happy to answer questions and share more details!

Visit product View on Hacker NewsJun 20, 2025

Share card

Actual performance

40points

17comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

89%89% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Hacker NewsStrong engagement from HN community · Strong signals: open source, ide, io · Missing: https docs, excited, just released

78%78% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Product HuntOn track for Day 1 leaderboard · Strong signals: apps, user, new · Missing: mac, agents, macos

66%66% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: apps, way · Missing: mobile apps, ios, personal

37%37% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Strong signals: host · Missing: plus, platform, intuitive

29%29% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Strong signals: revenue, subscription · Missing: arr, mrr, profit

22%22% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

Scan your OSS projects for vulnerabilities79%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Scan your OSS projects for vulnerabilities

Hacker News1

Thredded forums are minimalistic and OSS62%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Thredded forums are minimalistic and OSS

Hacker News5

Dynmgrm – Operate DynamoDB with GORM (Golang OSS)49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Dynmgrm – Operate DynamoDB with GORM (Golang OSS)

Hacker News1

We Put Chromium on a Unikernel (OSS Apache 2.0)63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

We Put Chromium on a Unikernel (OSS Apache 2.0)

Hacker News132

My First OSS as a Teen44%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

My First OSS as a Teen

Hacker News4

Shoutouts.dev – Write shoutouts for your favourite OSS projects49%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Shoutouts.dev – Write shoutouts for your favourite OSS projects

Hacker News5

A website to submit your abandoned OSS projects to55%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A website to submit your abandoned OSS projects to

Hacker News2

Agent Smith Is OSS41%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Agent Smith Is OSS

Hacker News1

KickStarter for open source projects and LinkedIn for OSS contributors60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

KickStarter for open source projects and LinkedIn for OSS contributors

Hacker News86

Capricorn – A browser for aliyun-oss63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Capricorn – A browser for aliyun-oss

Hacker News3

Browse all products Analyze your launch