50 live on AWS Marketplace33 on Azure MarketplaceGoogle Cloud next

Cloud imagesyou can prove.

Production-ready AMIs and Azure images, built clean-room from official sources, with no credentials baked in and every package listed before you launch. Passwords are generated on your instance at first boot — never on ours.

Browse the catalog Talk to an engineer

Bitnami AMIs left AWS on June 10, 2026. See the replacement for each one.

Built from official sources only
No credentials baked in
Every package listed before launch

51 products · one clean-room pipeline

50
Live on AWS Marketplace: 3
Cloud platforms: 0
Credentials shipped in any image: 100%
Built from official sources

01How it works

From catalog to production in four steps.

No new control plane, no runtime agent, no lock-in. You get an image ID for your cloud and the documentation to defend it in an audit.

01
Pick your cloud and image
Browse by provider, OS, architecture, region and workload. Every image lists its full software inventory before you launch anything.
catalog · aws + azure
02
Get it in your account
Subscribe on AWS Marketplace or Azure Marketplace and launch the server straight from the listing. No agents, no control plane, no pipeline changes.
aws + azure marketplace
03
Stay on the latest version
Patched versions are published when security fixes land, each with release notes and the updated software inventory. New launches get the newest version; servers you already run keep working and need no action.
v4.3.1 → v4.4.0
04
Need it customised? Talk to us
Extra packages, your own hardening profile, a different base OS, or a region we do not publish to yet — we build bespoke images against the same pipeline and provenance.
custom build · on request

02From the catalog

Recent launches.

The newest images to land in the catalog. Every entry publishes its full software inventory, hardening posture and region list before you launch anything.

View all 102 images

03Multi-cloud

One clean-room build, every cloud you run.

The same official sources, the same first-boot credential model and the same documented posture — built natively for each cloud rather than lifted-and-shifted between them. AWS and Azure builds come first; Google Cloud is next.

AWS50 available

Amazon Web Services

Published as AMIs you launch by ID, or shared privately to your AWS account IDs. Drops straight into an existing launch template.

Identifier: AMI ID
Compute: EC2 instance types
Storage: EBS volume
Region format: us-east-1

Browse AWS images

Azure33 available

Microsoft Azure

Listed on Azure Marketplace: create the VM from the listing in the Azure portal, or ask for a private build shared to your subscription through a Compute Gallery. Works with your existing VM and AKS deployments.

Identifier: Compute Gallery image ID
Compute: VM sizes
Storage: Managed OS disk
Region format: westeurope

Browse Azure images

GCPOn the roadmap

Google Cloud

The same clean-room build, credential model and patch cadence, published as Compute Engine images. In the pipeline now — tell us which images you need first, and they ship first.

Identifier: Compute Engine image
Compute: Machine types
Storage: Persistent disk
Region format: us-central1

Ask for it first

Running more than one cloud? Tell us about your setup — image parity across clouds is the whole point.

04Services

Want it deployed, migrated or reviewed by the people who build the images?

Fixed-scope packages with public prices, scripts you can run yourself, and retainers for ongoing work. You pay for your first package after it is delivered.

Self-serve

from $19

one-time, instant download

Scripts, templates and pipelines you run yourself.

Browse scripts

Done-for-you

from $149

founding rate, one-time

Fixed scope, fixed price, delivered in days.

See the packages

Custom and ongoing

Custom

retainers from $1,500 per month

Bespoke deployments, retainers and yearly contracts.

Book a scoping call

See all services and pricing Free AWS health check

05Why ProvenCloud

Nothing hidden, nothing baked in.

Every image is built clean-room from official sources and ships with its full software inventory and a written security posture. The only secrets on your instance are the ones it generates for you at first boot.

Build record — clean-room image · Ubuntu 24.04 LTSSpecimen · sample record

Base image: Canonical Ubuntu LTS · official
Sources: vendor repositories and releases only
Credentials in image: none · generated at first boot (IMDSv2)
SSH: key-only · root login refused
Database bind: private by default
Build artefacts: keys, shell history, logs removed

Vendor-string scan · before capturePassed · verified with a real sign-in

Illustrative sample. Every product page states these facts for its own image, in full, under Security posture — alongside the complete list of installed software and versions.

Official sources only

Every component comes from its vendor’s own repository or release. Nothing is copied from a third-party image, and the finished image is scanned for stray vendor strings before capture.

No credentials in the image

Admin, database and console passwords are generated on your instance at first boot from instance metadata, and the scripts that set them delete themselves afterwards.

Locked down before capture

SSH is key-only with root login refused. Databases are private by default, unless the product is built for remote access. Build-time keys, shell history and logs are removed before the image is taken.

Nothing to install

No agent, no daemon, no phone-home. You launch a plain AMI or gallery image, and it keeps working exactly the same if you never talk to us again.

Any region, on request

Built in 84 regions

Every product page lists the regions its image is built for today. Copying a build to another region is routine work and included — tell us where you run.

+65 regions not drawn on the map · show

af-south-1
ap-east-1
ap-east-2
ap-northeast-2
ap-northeast-3
ap-south-2
ap-southeast-2
ap-southeast-3
ap-southeast-4
ap-southeast-5
ap-southeast-6
ap-southeast-7
australiacentral
australiasoutheast
austriaeast
belgiumcentral
brazilsouth
ca-central-1
ca-west-1
canadacentral
canadaeast
chilecentral
denmarkeast
eastasia
eu-central-2
eu-north-1
eu-south-1
eu-south-2
eu-west-2
eu-west-3
francecentral
germanywestcentral
il-central-1
indiasouthcentral
indonesiacentral
israelcentral
italynorth
japanwest
jioindiawest
koreacentral
koreasouth
malaysiawest
me-central-1
me-south-1
mexicocentral
mx-central-1
newzealandnorth
northcentralus
norwayeast
polandcentral
qatarcentral
southafricanorth
southcentralus
southindia
spaincentral
swedencentral
switzerlandnorth
uaenorth
ukwest
us-east-2
us-west-1
westcentralus
westindia
westus
westus3

af-south-1ap-east-1ap-east-2ap-northeast-1ap-northeast-2ap-northeast-3

Drops into the tooling you already run

Terraform
CloudFormation
Bicep
Pulumi
Ansible
Packer
Auto Scaling
Systems Manager
CloudWatch
Azure Monitor

Custom builds

Need an image we do not list yet?

We build custom images through the same clean-room pipeline, and we can deploy, migrate or review your setup on AWS and Azure. Tell us what you run.

Talk to an engineer See services and pricing

A real engineer reads every message, and we reply within 1 business day.