What Is Bitnami Secure Images? Pricing, Licence and Alternatives

The short answer

Bitnami Secure Images is Broadcom's commercial catalog of maintained, versioned Bitnami container images and Helm charts. It is what Bitnami points production users to since the free catalog changed on 28 August 2025, when versioned images moved to the unmaintained bitnamilegacy repository. Broadcom does not publish list pricing, and since 31 August 2026 Bitnami Secure Images has been sold as part of the Broadcom TrueSource portfolio.

Why Bitnami Secure Images exists

For years, Bitnami's free images on Docker Hub were the default way to run PostgreSQL, Redis, Kafka, RabbitMQ and dozens of other applications on Kubernetes. Bitnami announced on 16 July 2025 that this would end. From 28 August 2025, versioned tags moved to docker.io/bitnamilegacy, which receives no further updates or support, and the free community tier was reduced to latest tags of a limited set of images for development use. The public docker.io/bitnami catalog was removed on 29 September 2025.

Bitnami Secure Images is the paid path for teams that want to keep using Bitnami images in production, with version pinning and ongoing updates.

What Bitnami Secure Images includes

According to Bitnami's own announcement of the catalog change, the Secure Images offering provides:

• Hardened images built to SLSA Build Level 3.
• Vulnerability context, with VEX statements and data on known-exploited vulnerabilities.
• Software bills of materials for each image.
• Long-term support branches for versioned images.
• A catalog of more than 280 applications, with the matching Helm charts.

Because the images keep the Bitnami layout, existing Bitnami Helm charts work with them. That compatibility is the main reason teams consider it at all.

Bitnami Secure Images pricing

There is no public price list. Bitnami Secure Images is sold as a commercial subscription through Broadcom, and on 31 August 2026 it became part of Broadcom TrueSource, a broader portfolio that also includes clean-room builds of Java, Python and Node.js ecosystems. Expect an enterprise sales process and quote-based pricing rather than a self-service plan. See Broadcom TrueSource explained for how the portfolio is packaged.

Licensing: what changes for you

The software inside the images keeps its own open source licence: PostgreSQL remains under the PostgreSQL License, Kafka under Apache 2.0, and so on. What you are licensing from Broadcom is the maintained image catalog and the service around it. The free bitnamilegacy images remain pullable, but with no updates they are not a production option.

What Bitnami Secure Images does not cover

The catalog follows upstream support. When an application version reaches end of life upstream, it drops out of the maintained set. That leaves a gap for teams pinned to versions such as PostgreSQL 13, Redis 7.2, Kafka 3.x on ZooKeeper, RabbitMQ 3.13 or MongoDB 4.4, which is precisely where many production estates are.

Bitnami Secure Images alternatives

For the full comparison, and a variable-by-variable replacement guide for each image, see Bitnami alternatives compared. OSSeva's drop-in images keep Bitnami's layout for PostgreSQL, Redis, Kafka, ZooKeeper, RabbitMQ, MongoDB and Elasticsearch, including end-of-life versions.

Frequently asked questions

Is Bitnami Secure Images free?

No. It is a commercial subscription. The free Bitnami offering is limited to latest tags of a subset of images for development.

Do Bitnami Helm charts work with Bitnami Secure Images?

Yes. The images keep the Bitnami layout the charts expect.

Is Bitnami Secure Images part of TrueSource?

Yes. Since 31 August 2026, Bitnami Secure Images is sold as part of Broadcom TrueSource.

What happens to images I pulled from bitnamilegacy?

They keep running and keep pulling, but they receive no updates, so every vulnerability disclosed since the move stays open.