Determinate Systems
Determinate Systems provides an enterprise-grade Nix distribution, FlakeHub flake publishing and caching platform, and FIPS-compliant Determinate Secure Packages for engineering teams and IT/Ops requiring SOC 2, FedRAMP-ready, and software supply chain security compliance.
- Company typePrivate
- Founded2021
- HeadquartersPittsfield, United States
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Determinate Systems does
Determinate Systems, Inc. is a private Delaware-incorporated software company founded in 2021 and headquartered in Pittsfield, Massachusetts, that provides an enterprise-grade distribution and platform built around the Nix package management ecosystem. The company's core product, Determinate Nix, is a hardened distribution of the upstream Nix package manager that adds enterprise features such as automatic garbage collection, signed and notarized macOS packages, MDM-friendly automation (Jamf, Installomator), SOC 2 Type II compliance, and a one-command installer with survival mode across OS updates. It is complemented by FlakeHub — a platform for publishing, discovering, and caching Nix flakes with semantic versioning — and FlakeHub Cache, a binary caching service with granular per-flake access control and OIDC/JWT-based CI integration for GitHub Actions, Buildkite, and Semaphore. Determinate Secure Packages extends the offering with FIPS-compliant, signed, auditable Nix packages backed by SLA-driven CVE remediation (7/15/45/90 days for Critical/High/Medium/Low), targeting critical infrastructure and regulated buyers. The company also operates Determinate Gov, a FedRAMP-ready variant for defense and national security workloads, with support for AWS GovCloud, AWS European Sovereign Cloud, and Microsoft Entra GCC-High.
The business model is enterprise subscription-based with quote-based pricing. Revenue streams include the Determinate Nix Enterprise license (SOC 2, SSO, fine-grained access controls, MDM automation), FlakeHub paid plans (the free tier excludes FlakeHub Cache), and Determinate Secure Packages access. Go-to-market is hybrid: developer-led growth through self-serve install (Determinate.pkg, curl installer, GitHub Actions), community channels (Discord, blog, Zero to Nix educational resource), paired with a direct enterprise sales motion via [email protected]. The company is the only SOC 2 Type II-compliant vendor in the Nix ecosystem, and its co-founders include Eelco Dolstra, the original creator of Nix. Headcount is reported at 1-10 employees, and only a single funding event is on record: an SEC Form D exempt offering filed in May 2022 for $4,000,000 total ($3,500,000 sold). Customer logos disclosed are limited — Fabriq and HashiCorp appear as named references — alongside an unnamed AppSec testimonial.
The product portfolio is anchored by deep integration breadth: identity (Okta, Microsoft Entra), cloud (AWS, GCP), CI/CD (GitHub Actions, Buildkite, Semaphore), MDM (Jamf, Installomator), corporate security (ZScaler, Fortinet), infrastructure-as-code (Terraform), and observability (Sentry). Complementary tooling includes FlakeBOM (CycloneDX v1.5 SBOM generation), Determinate Nixd (orchestration daemon with SSE event streaming), Flake Schemas (output introspection), and Resolve-only Tokens (least-privilege deployment tokens). The addressable customer base spans enterprise engineering teams, enterprise IT/Ops, and security/compliance-focused organizations in regulated industries, with a stated vertical focus on AI, CI/CD, cloud, edge, and physical AI infrastructure.
Determinate Systems firmographics
Firmographics- Name
- Determinate Systems
- Legal name
- Determinate Systems, Inc.
- Website
- https://determinate.systems
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Determinate Systems provides an enterprise-grade Nix distribution, FlakeHub flake publishing and caching platform, and FIPS-compliant Determinate Secure Packages for engineering teams and IT/Ops requiring SOC 2, FedRAMP-ready, and software supply chain security compliance.
- Ownership category
- akta.pro rank
Where Determinate Systems is headquartered
LocationHeadquarters
- HQ city
- Pittsfield
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Determinate Systems business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Determinate Nix Enterprise License: Enterprise-focused subscription model for Determinate Nix with features like SOC2 compliance, Single Sign-on, fine-grained access controls, and MDM-friendly automation for enterprise deployments.
- FlakeHub Paid Plans: FlakeHub Cache is available only on paid plans. FlakeHub offers subscription-based paid tiers for organizations requiring binary caching, private flakes, and enterprise features.
- Determinate Secure Packages: Premium package set with managed vulnerability remediation, FIPS support, and SLA-backed CVE mitigation, available through FlakeHub to organizations with access.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | FlakeHub Free Tier |
| Subscription | Annual | FlakeHub Paid Plans |
| Subscription | Annual | Determinate Secure Packages Access |
Go-to-market motion1 record
Distribution channels5 records
Marketing channels6 records
Determinate Systems product offering
Product offeringCore offering
Determinate Systems provides an enterprise-grade Nix platform for software development and deployment, including the Determinate Nix distribution, FlakeHub for publishing and caching Nix flakes, FlakeHub Cache for binary caching with granular access control, and Determinate Secure Packages for FIPS-compliant, signed packages. The company sells subscription-based enterprise licenses and paid FlakeHub plans to engineering teams that need reproducible builds, secure software supply chains, and fleet-wide configuration management.
Product overview
Determinate Systems provides an enterprise-grade Nix platform with multiple integrated products. The core offering consists of Determinate Nix (the enterprise Nix distribution), FlakeHub (the flake publishing and management platform), and Determinate Secure Packages (FIPS-compliant, auditable package set). These are complemented by FlakeHub Cache for binary caching with granular access control, the Determinate Nix Installer for simplified deployment, FlakeBOM for SBOM generation, and determinate-nixd as the daemon/orchestration layer. Products target engineering teams managing critical infrastructure across AI, CI, cloud, and edge environments. Integration ecosystem includes GitHub Actions, Buildkite, Semaphore (CI/CD), Jamf/Installomator (MDM), AWS/GCP (cloud), Microsoft Entra/Okta (SSO), and Terraform (IaC).
Differentiator
Problem solved
Functional benefit
Brands
- Determinate Nix: Enterprise Nix distribution with secure streamlined tools that simplify software development and deployment
- FlakeHub
- Determinate Secure Packages
- FlakeHub Cache
- Zero to Nix
Products and services
- Determinate Nix Enterprise-grade Nix distribution that simplifies Nix installation, management, and deployment across workstations, CI, and cloud environments, with SOC 2 compliance, automatic garbage collection, and centralized configuration management.
- FlakeHub Cloud platform for discovering, publishing, and managing Nix flakes with semantic versioning, enabling reproducible deployments and controlled distribution of Nix-based software artifacts across teams.
- FlakeHub Cache Binary caching solution for Nix with granular per-flake access control and JWT-based CI authentication, eliminating network bottlenecks by caching build artifacts across GitHub Actions, Semaphore, and Buildkite. Available only on paid plans.
- Determinate Secure Packages Secure, signed, auditable Nix packages built on Nixpkgs with FIPS compliance variants and managed vulnerability remediation, including SLA-backed CVE mitigation for critical infrastructure customers.
- Determinate Nix Installer One-command Nix installer supporting Linux, macOS, and WSL with features including survival mode through OS updates, automatic configuration, and enterprise certificate management.
- FlakeBOM Software Bill of Materials (SBOM) generator for Nix flakes that produces CycloneDX v1.5 JSON SBOMs with package provenance, vulnerability information, and vendored dependency detection.
- Determinate Nixd Nix daemon utility that enables FlakeHub login, manages configuration, provides streaming post-build event APIs via SSE, and orchestrates managed garbage collection and lazy trees.
Quantifiable outcome
- SLA-backed CVE mitigation: Critical vulnerabilities mitigated within 7 days, High within 15 days, Medium within 45 days, Low within 90 days
- +1 more outcomes
Companies that use Determinate Systems
Customer profileNamed customers2 records
Segments3 records
Ideal customer profiles2 records
Determinate Systems technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration16 records
Feature9 records
Determinate Systems partnerships and signals
Strategic signalPartnerships
Eight partnerships are on record, tiered core.
- JamfcoreJamf integration for deploying and managing Nix across macOS fleets. Determinate Nix provides Jamf-ready packages that are signed and notarized, with zero-touch deployment support for Jamf Now and Jamf Pro. Smart groups support enables targeted deployments based on organizational structure.
- GitHub ActionscoreFirst-class GitHub Actions integration with multiple official actions: determinate-nix-action, flakehub-cache-action, flake-checker-action, update-flake-lock, and CI action. JWT-based authentication for FlakeHub Cache.
- BuildkitecoreBuildkite CI/CD platform integration for FlakeHub and FlakeHub Cache. OIDC-based authentication via Buildkite API. Example pipelines provided for pushing to FlakeHub Cache and publishing flakes.
- SemaphorecoreSemaphore CI/CD platform integration for FlakeHub and FlakeHub Cache. OIDC token-based authentication. Example pipeline configurations for Nix builds and flake publishing.
- Amazon Web Services (AWS)coreAWS integration including EC2 macOS instance support, IAM authentication for FlakeHub Cache, NixOS AMIs (including AWS GovCloud and AWS European Sovereign Cloud), and Systems Manager integration.
- Google Cloud Platform (GCP)coreGCP integration with Service Account authentication for FlakeHub. Enables access to private flakes and FlakeHub Cache from GCP instances.
- OktacoreOkta OIDC integration for FlakeHub authentication. Enterprise SSO onboarding support with detailed configuration guide for Okta administrators.
- Microsoft EntracoreMicrosoft Entra ID (Azure AD) integration for FlakeHub authentication. Supports both Public and GCC-High (Azure Government Cloud) environments.
Scale indicators1 record
Recent moves6 records
Expansion highlights6 records
Determinate Systems competitors and assessment
Company assessmentDirect peers
- Chainguard: Provides hardened, minimal container images and software supply chain security with reproducible builds. Closest peer because it targets the same enterprise pain points — secure software supply chain, reproducibility, SBOM/provenance — using a different but adjacent technology stack (Wolfi vs Nix).
Broad incumbents
- Snyk: Developer security platform covering SCA, container security, IaC security, and SBOM. Overlaps with Determinate on software supply chain visibility and developer-centric security, but serves a much broader security market.
- Sonatype: Enterprise software supply chain management (Nexus Repository, Lifecycle, SBOM). Competes in supply-chain security and artifact management but with broader focus beyond Nix-based ecosystems.
- JFrog: Universal artifact management and DevSecOps platform (Artifactory, Xray). Adjacent to Determinate's FlakeHub Cache as a binary/artifact repository and security scanning platform, but at much larger scale and broader scope.
- GitLab: End-to-end DevOps platform covering source control, CI/CD, security scanning, and artifact management. Overlaps with Determinate's enterprise DevOps positioning but at vastly broader scope.
Emerging players
- Anchore: Container security and SBOM generation platform with policy-based compliance enforcement. Overlaps with Determinate's FlakeBOM and compliance messaging, especially around federal/SBOM mandates.
- Tidelift: Open-source supply chain security and maintenance platform. Addresses similar concerns around trusted packages and remediation, but at the open-source dependency layer rather than the build/distribution layer.
- Sigstore: Linux Foundation project for signing, verifying, and provenance for software artifacts (cosign, Fulcio, Rekor). Competes conceptually with Determinate Secure Packages' signed/auditable package model.
Others
- Buildkite: CI/CD platform with deep Nix integration through Determinate's partnerships. Not a direct competitor — instead a complementary CI/CD partner that Determinate actively integrates with via OIDC-authenticated FlakeHub Cache.
- HashiCorp: Infrastructure-as-code and configuration management company (Terraform, Vault, Packer, Nomad). Not a direct competitor but a flagship Determinate customer (Mitchell Hashimoto endorsement) and adjacent in reproducible infrastructure tooling.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Determinate Systems social profiles
Digital presenceDeterminate Systems compliance and trust
Trust signalCompliance2 records
Determinate Systems financial estimates
Financial estimateRevenue estimate
Valuation estimate
Determinate Systems leadership team
Management profileNumber of profiles
Profiles2 records
Determinate Systems funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Determinate Systems M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Determinate Systems
What does Determinate Systems do?
Determinate Systems provides an enterprise-grade Nix platform for software development and deployment, including the Determinate Nix distribution, FlakeHub for publishing and caching Nix flakes, FlakeHub Cache for binary caching with granular access control, and Determinate Secure Packages for FIPS-compliant, signed packages. The company sells subscription-based enterprise licenses and paid FlakeHub plans to engineering teams that need reproducible builds, secure software supply chains, and fleet-wide configuration management.
Is Determinate Systems a public or private company?
Determinate Systems is a private company. It is classified as venture growth investor backed and is currently operating.
When was Determinate Systems founded?
Determinate Systems was founded in 2021. It employs 1 to 10 people.
Where is Determinate Systems based?
Determinate Systems is headquartered in Pittsfield, United States, in the North America region.
How does Determinate Systems make money?
Three revenue lines are on record. Determinate Nix Enterprise License is the primary driver. The others are flakeHub Paid Plans and determinate Secure Packages.
Who are Determinate Systems's main competitors?
Chainguard is listed as a direct peer. Broad incumbents are Snyk, Sonatype, JFrog and GitLab. Emerging players are Anchore, Tidelift and Sigstore. Others are Buildkite and HashiCorp.
Does Determinate Systems have an API?
Yes. Determinate Systems offers CLI-based programmatic interfaces rather than a traditional REST API. The FlakeHub CLI (fh) and determinate-nixd commands provide automation capabilities for publishing flakes to FlakeHub, managing Nix configurations, and deploying NixOS systems. The determinate-nixd also provides a streaming HTTP API for server-sent events (SSE) enabling applications to act on completed builds, listening on the socket at /nix/var/determinate/determinate-nixd.socket. API operations include flake publishing (flakehub-push), FlakeHub Cache management, Flake lock updates, and NixOS configuration deployment.