Developer docs
API playgroundTry for free, no card

Search company profiles

BellSoft

Full company profile

uuid0009sqr

Namestring
BellSoft
Legal namestring
BellSoft
Websiteurl
bell-sw.com
Company typeenum
Private
Founded yearint
2015
Descriptiontext

BellSoft is a privately held Java infrastructure company founded in 2015 and a major contributor to the OpenJDK project. Its core product, Liberica JDK, is a TCK-verified, open-source distribution of Java SE positioned as an Oracle JDK drop-in replacement, offered free with paid enterprise support subscriptions. The company has built a layered product stack around the runtime: Alpaquita Linux (a Java-optimized Linux distribution), Liberica Native Image Kit (GraalVM-based native compilation), Liberica Mission Control (performance monitoring), and Hardened Images (pre-hardened, near-zero CVE container images for Java, Go, Python, and other workloads). Specializations include Liberica JDK Lite (30% less RAM for cloud), Performance Edition (10% speedup for JDK 8/11), CRaC support, Embedded builds, and legacy Java 6/7 support.

Short descriptiontext

BellSoft is a private Java infrastructure company and major OpenJDK contributor that provides Liberica JDK, Alpaquita Linux, and Hardened Images as a TCK-verified Oracle JDK alternative for enterprise developers and DevOps teams running containerized Java workloads.

Operating statusenum
Operating
Ownership categoryenum
Headcount rangeband
11–50
akta.pro rankint
HeadquartersSan Jose, United States
HQ citystring
San Jose
HQ countrystring
United States
HQ regionstring
North America
Markets served

Serves global market

Offices2 records

Each record includes

City, Country, Type, Description, Source

Keyword5 values
Java runtime, OpenJDK distribution, container security images, Java development kit, Linux container base
Industry2 codes
1Cloud-Native Development (Containers, Kubernetes, Microservices)
CodeBPAEACADPrimaryYes
2Developer Tooling & SDK Platforms
CodeBPAMAOADPrimaryNo
NAICS code2 codes
  • Software Publishers513210
  • Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services5182
SIC code2 codes
  • Services-Prepackaged Software7372
  • Services-Computer Programming, Data Processing, Etc.7370
Product category
Java Runtime & Development Tools
Social media profiles1 record
GTM motion1 record

Each record includes

Type, Description, Source

Revenue model2 records
1Enterprise Support Subscriptions
TypeSubscription Recurring
Description

BellSoft offers paid support plans for Liberica JDK, Alpaquita Linux, and Liberica Native Image Kit targeting enterprise customers. These subscription plans provide 24/7 technical support from Java experts along with security updates and maintenance.

bell-sw.com
2Hardened Container Images
TypeSubscription Recurring
Description

Pre-hardened, security-focused container images with technical support across OS and JDK layers, positioned as a value-added product for enterprise container deployments.

bell-sw.com
Marketing channels6 records

Each record includes

Title, Type, Stage, Description, Source

Distribution channels3 records

Each record includes

Title, Type, Scope, Target buyer, Description, Source

Cost components5 values
Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Pricing details1 tier
1Enterprise Support for Liberica JDK
ModelSubscriptionBilling cadenceAnnual
Notes

Flexible and cost-effective support options for Liberica JDK Enterprise, including 24/7 expert support.

bell-sw.com
GTM typeB2B
B2B
Offering typeSoftware
Software
Brand1 of 4 records shown
1Liberica JDK
Description

Free, open-source implementation of Java SE with enterprise-grade support and TCK-verified compatibility, serving as an Oracle JDK alternative

bell-sw.com
+3 more records
Core offering1 text field

BellSoft develops and distributes Liberica JDK, a TCK-verified, free open-source Java SE implementation that serves as an Oracle JDK drop-in replacement with enterprise-grade support. Around it the company bundles Alpaquita Linux (a Java-optimized Linux base), BellSoft Hardened Images (pre-hardened, near-zero CVE container images), and the Liberica Native Image Kit (GraalVM-based native compilation tooling), sold individually or as a unified Java runtime platform for cloud, container, and Kubernetes deployments.

Differentiator
Functional benefit
Problem solved
Quantifiable outcome1 of 4 values shown
  • Up to 30% less RAM usage with Liberica JDK Lite compared to standard JDK
+3 more records
Product overview1 text field

BellSoft offers a unified Java runtime platform built around Liberica JDK as the core product, complemented by Alpaquita Linux as an optimized OS layer, and Hardened Images as a security-focused container solution. The portfolio includes specialized flavors (Performance Edition, Lite for cloud, CRaC support, Embedded, legacy 6/7 support), tooling (Liberica Native Image Kit for GraalVM-based native compilation, Liberica Mission Control for monitoring), and various container image offerings (Alpaquita Containers, Spring Boot-optimized containers, Liberica JDK containers). The company positions itself as an Oracle JDK alternative trusted by enterprises, providing TCK-verified builds with cryptographic signing, 24/7 support, and security coverage across both OS and JDK layers.

Product and service10 records
1Liberica JDK
CategoryJava Runtime Environment
Description

Free, open-source, TCK-verified Java SE implementation that serves as a drop-in Oracle JDK replacement with cryptographic signing, verified builds, and optional enterprise-grade 24/7 support; targeted at enterprises running production Java workloads.

2Alpaquita Linux
CategoryLinux Distribution
Description

Small, secure, and reliable Linux distribution specifically optimized for Java workloads; the only OS purpose-built for Java and used as the foundation for BellSoft's container images. Targeted at enterprises and developers running Java in containers, VMs, and bare metal.

3BellSoft Hardened Images
CategoryContainer Security
Description

Pre-hardened, vendor-maintained container images with near-zero CVEs for Java, Go, Python, and more, built on Alpaquita Linux and designed to minimize attack surfaces and support compliance in Kubernetes environments; the only provider delivering near-zero vulnerability containers with support across both OS and JDK layers, targeted at security-conscious enterprises.

4Liberica Native Image Kit
CategoryJava Development Tooling
Description

GraalVM-based tool that compiles Java applications into fast, lightweight native executables to improve startup time and reduce memory footprint; targeted at Java developers building cloud-native and serverless applications.

5Liberica Mission Control
CategoryJava Performance Monitoring
Description

Tool for monitoring, diagnostics, and management of Java application performance, targeted at Java developers and SREs running production JVM workloads.

6Alpaquita Containers
CategoryContainer Images
Description

Small and secure container images built on Alpaquita Linux, available for Java, Go, Python, and C workloads, targeted at developers optimizing resource usage in containerized deployments.

7Containers with Liberica JDK
CategoryContainer Images
Description

Prebuilt container images that combine Liberica JDK with popular Linux distributions, targeted at Java developers seeking ready-to-run containerized Java environments.

8Containers for Spring Boot
CategoryContainer Images
Description

Pre-configured Alpaquita-based container images specifically optimized for Spring Boot applications, saving up to 30% on resource usage; targeted at Spring Boot developers and teams running Java microservices.

9Liberica JDK 6 & 7
CategoryLegacy Java Runtime
Description

Legacy Java runtime distributions with security updates for Java 6 and 7, targeted at enterprises with long-lived older applications requiring continued security patches.

10Liberica JDK for Embedded
CategoryEmbedded Java Runtime
Description

Java runtime distribution optimized for embedded systems with resource constraints, targeted at developers building Java applications on embedded and IoT devices.

Scale indicator4 records

Each record includes

Type, Value, Description, Source

Partnership1 partner
Strategic tierCoreTypeStrategic or Co-development PartnerAnnounced on2026-01-01
Description

Red Hat launched Project Hummingbird in response to BellSoft's survey findings on container security. The project creates a catalog of minimal, hardened container images aimed at reducing attack surfaces and achieving 'zero-CVE' applications. BellSoft's research on pre-hardened images influenced this Red Hat initiative, demonstrating market education impact.

Recent move5 records

Each record includes

Date, Type, Title, Description, Source

Expansion highlight5 records

Each record includes

Type, Description

Peers10 records
TypeDirect peer
Description

Direct commercial JDK competitor offering Zulu OpenJDK builds and Azul Platform Prime (high-performance JDK). Closest comparable to BellSoft in the commercial-JDK-support category, serving enterprise Java shops seeking Oracle JDK alternatives.

TypeDirect peer
Description

Community-driven, TCK-verified OpenJDK distribution backed by the Eclipse Foundation. Competes with Liberica JDK as a free, standards-compliant alternative for developers; differs from BellSoft in lacking commercial enterprise support as the core offering.

TypeBroad incumbent
Description

The dominant incumbent in commercial Java with Oracle JDK, GraalVM, and Java SE subscriptions. BellSoft's value prop of 'Oracle JDK drop-in replacement at up to 70% lower cost' is directly positioned against Oracle's pricing and licensing.

TypeBroad incumbent
Description

Distributor of Red Hat Build of OpenJDK and initiator of Project Hummingbird (hardened container images) — a project BellSoft's research directly influenced. Broad incumbent across enterprise Linux, middleware, and now container security.

TypeBroad incumbent
Description

Amazon's free, multi-platform OpenJDK distribution optimized for AWS. A free hyperscaler-backed alternative that pressures paid support economics across the entire commercial JDK category, including BellSoft.

TypeEmerging player
Description

Well-capitalized startup specializing in hardened, minimal container images with near-zero CVEs. Most direct competitor to BellSoft's Hardened Images product line, with stronger venture backing and brand recognition in the container security category.

TypeRegional player
Description

Alibaba's OpenJDK distribution optimized for large-scale e-commerce and cloud workloads. Comparable to BellSoft Liberica JDK as an OpenJDK build with enterprise support, but primarily serves the Chinese market and Alibaba Cloud ecosystem.

TypeDirect peer
Description

SAP's OpenJDK build with enterprise support for SAP customers. Directly comparable to Liberica JDK as a vendor-maintained OpenJDK distribution, though BellSoft has broader cross-industry positioning.

TypeBroad incumbent
Description

Microsoft's free OpenJDK distribution. Another free hyperscaler-backed alternative that competes with Liberica JDK at the free tier and pressures paid-support economics across the Java ecosystem.

TypeBroad incumbent
Description

Multi-product developer security platform including container and open-source security scanning. Adjacent competitor to BellSoft's Hardened Images in container security, though Snyk focuses on scanning/detection rather than pre-hardened base images.

Market position
Strengths5 records

Each record includes

Headline, Details, Source

Weaknesses5 records

Each record includes

Headline, Details, Source

Competitive moat4 records

Each record includes

Type, Details

Key risks6 records

Each record includes

Headline, Details, Source

Key highlights6 records

Each record includes

Headline, Details, Source

Customer concentration

Classification, Details

Named customers10 records

Each record includes

Name, Industry, Type, Use case, Source, UUID

Segment3 records

Each record includes

Title, Type, Primary, Description, Pain point addressed, Use case, Source

Ideal customer profile2 records

Each record includes

Profile, Firmographic size, Sales motion, Sales cycle length, Buying structure, Purchase trigger, Buyer persona, Geography, Industry vertical, Primary use case, Description, Pain points, Evidence proof points, Target buyer

Technology focused
Yes
API detail
Has APIbool
No

Docs URL, Description

AI maturity
App detail

Has app

Feature6 records

Each record includes

Title, Differentiator, Description, Source

Core technology
Revenue estimate
Valuation estimate
Number of profiles
Profiles1 record

Each record includes

Name, Designation, Designation category, Overview, Profile commentary, Source

No data
No data
Funding overview

Funding stage, Last funding date, Total funding USD

Funding rounds

Each record includes

Round, Amount USD, Date, Pre money valuation, Total investors, Investors, News

Investors

Each record includes

Name, Type, Date of entry, Rounds participated, Website

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Each record includes

Name, Acquisition type, Announced date, Completed date, Status, Website, News

Investment

Each record includes

Name, Round, Announced date, Lead investor, Website, News

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

BellSoft

Java Runtime & Development Toolsbell-sw.com

BellSoft is a private Java infrastructure company and major OpenJDK contributor that provides Liberica JDK, Alpaquita Linux, and Hardened Images as a TCK-verified Oracle JDK alternative for enterprise developers and DevOps teams running containerized Java workloads.

What BellSoft does

BellSoft is a privately held Java infrastructure company founded in 2015 and a major contributor to the OpenJDK project. Its core product, Liberica JDK, is a TCK-verified, open-source distribution of Java SE positioned as an Oracle JDK drop-in replacement, offered free with paid enterprise support subscriptions. The company has built a layered product stack around the runtime: Alpaquita Linux (a Java-optimized Linux distribution), Liberica Native Image Kit (GraalVM-based native compilation), Liberica Mission Control (performance monitoring), and Hardened Images (pre-hardened, near-zero CVE container images for Java, Go, Python, and other workloads). Specializations include Liberica JDK Lite (30% less RAM for cloud), Performance Edition (10% speedup for JDK 8/11), CRaC support, Embedded builds, and legacy Java 6/7 support.

BellSoft firmographics

Firmographics
Name
BellSoft
Legal name
BellSoft
Website
https://bell-sw.com
Company type
Private
Founded year
2015
Operating status
Operating
Headcount range
11–50 employees
Short description
BellSoft is a private Java infrastructure company and major OpenJDK contributor that provides Liberica JDK, Alpaquita Linux, and Hardened Images as a TCK-verified Oracle JDK alternative for enterprise developers and DevOps teams running containerized Java workloads.
Ownership category
akta.pro rank

BellSoft industry classification

Industry
Product category
Java Runtime & Development Tools
NAICS
Software Publishers (513210), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
SIC
Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
akta.pro primary industry
Cloud-Native Development (Containers, Kubernetes, Microservices) (BPAEACAD)
akta.pro secondary industry
Developer Tooling & SDK Platforms (BPAMAOAD)

Keywords

  • Java runtime
  • OpenJDK distribution
  • Container security images
  • Java development kit
  • Linux container base

Where BellSoft is headquartered

Location

Headquarters

HQ city
San Jose
HQ country
United States
HQ region
North America

Offices2 records

Markets served

BellSoft business model

Business model
GTM type
B2B
Offering type
Software
Cost components
Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

  1. Enterprise Support Subscriptions: BellSoft offers paid support plans for Liberica JDK, Alpaquita Linux, and Liberica Native Image Kit targeting enterprise customers. These subscription plans provide 24/7 technical support from Java experts along with security updates and maintenance.
  2. Hardened Container Images: Pre-hardened, security-focused container images with technical support across OS and JDK layers, positioned as a value-added product for enterprise container deployments.

Pricing tiers

ModelBillingPrice
SubscriptionAnnualEnterprise Support for Liberica JDK

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

BellSoft product offering

Product offering

Core offering

BellSoft develops and distributes Liberica JDK, a TCK-verified, free open-source Java SE implementation that serves as an Oracle JDK drop-in replacement with enterprise-grade support. Around it the company bundles Alpaquita Linux (a Java-optimized Linux base), BellSoft Hardened Images (pre-hardened, near-zero CVE container images), and the Liberica Native Image Kit (GraalVM-based native compilation tooling), sold individually or as a unified Java runtime platform for cloud, container, and Kubernetes deployments.

Product overview

BellSoft offers a unified Java runtime platform built around Liberica JDK as the core product, complemented by Alpaquita Linux as an optimized OS layer, and Hardened Images as a security-focused container solution. The portfolio includes specialized flavors (Performance Edition, Lite for cloud, CRaC support, Embedded, legacy 6/7 support), tooling (Liberica Native Image Kit for GraalVM-based native compilation, Liberica Mission Control for monitoring), and various container image offerings (Alpaquita Containers, Spring Boot-optimized containers, Liberica JDK containers). The company positions itself as an Oracle JDK alternative trusted by enterprises, providing TCK-verified builds with cryptographic signing, 24/7 support, and security coverage across both OS and JDK layers.

Differentiator

Problem solved

Functional benefit

Brands

  • Liberica JDK: Free, open-source implementation of Java SE with enterprise-grade support and TCK-verified compatibility, serving as an Oracle JDK alternative
  • Alpaquita Linux
  • Liberica Native Image Kit
  • BellSoft Hardened Images

Products and services

  • Liberica JDK Free, open-source, TCK-verified Java SE implementation that serves as a drop-in Oracle JDK replacement with cryptographic signing, verified builds, and optional enterprise-grade 24/7 support; targeted at enterprises running production Java workloads.
  • Alpaquita Linux Small, secure, and reliable Linux distribution specifically optimized for Java workloads; the only OS purpose-built for Java and used as the foundation for BellSoft's container images. Targeted at enterprises and developers running Java in containers, VMs, and bare metal.
  • BellSoft Hardened Images Pre-hardened, vendor-maintained container images with near-zero CVEs for Java, Go, Python, and more, built on Alpaquita Linux and designed to minimize attack surfaces and support compliance in Kubernetes environments; the only provider delivering near-zero vulnerability containers with support across both OS and JDK layers, targeted at security-conscious enterprises.
  • Liberica Native Image Kit GraalVM-based tool that compiles Java applications into fast, lightweight native executables to improve startup time and reduce memory footprint; targeted at Java developers building cloud-native and serverless applications.
  • Liberica Mission Control Tool for monitoring, diagnostics, and management of Java application performance, targeted at Java developers and SREs running production JVM workloads.
  • Alpaquita Containers Small and secure container images built on Alpaquita Linux, available for Java, Go, Python, and C workloads, targeted at developers optimizing resource usage in containerized deployments.
  • Containers with Liberica JDK Prebuilt container images that combine Liberica JDK with popular Linux distributions, targeted at Java developers seeking ready-to-run containerized Java environments.
  • Containers for Spring Boot Pre-configured Alpaquita-based container images specifically optimized for Spring Boot applications, saving up to 30% on resource usage; targeted at Spring Boot developers and teams running Java microservices.
  • Liberica JDK 6 & 7 Legacy Java runtime distributions with security updates for Java 6 and 7, targeted at enterprises with long-lived older applications requiring continued security patches.
  • Liberica JDK for Embedded Java runtime distribution optimized for embedded systems with resource constraints, targeted at developers building Java applications on embedded and IoT devices.

Quantifiable outcome

  • Up to 30% less RAM usage with Liberica JDK Lite compared to standard JDK
  • +3 more outcomes

Companies that use BellSoft

Customer profile

Named customers10 records

Segments3 records

Ideal customer profiles2 records

BellSoft technology and API

Technology

Technology focussed Yes

API detail

Has API
No
API docs
API detail

Core technology

AI maturity

App detail

Feature6 records

BellSoft partnerships and signals

Strategic signal

Partnerships

One partnership is on record.

  • Red HatcoreStrategic or Co-development Partner · 1 January 2026Red Hat launched Project Hummingbird in response to BellSoft's survey findings on container security. The project creates a catalog of minimal, hardened container images aimed at reducing attack surfaces and achieving 'zero-CVE' applications. BellSoft's research on pre-hardened images influenced this Red Hat initiative, demonstrating market education impact.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

BellSoft competitors and assessment

Company assessment

Direct peers

  • Azul Systems: Direct commercial JDK competitor offering Zulu OpenJDK builds and Azul Platform Prime (high-performance JDK). Closest comparable to BellSoft in the commercial-JDK-support category, serving enterprise Java shops seeking Oracle JDK alternatives.
  • Eclipse Adoptium (Temurin): Community-driven, TCK-verified OpenJDK distribution backed by the Eclipse Foundation. Competes with Liberica JDK as a free, standards-compliant alternative for developers; differs from BellSoft in lacking commercial enterprise support as the core offering.
  • SAP (SapMachine): SAP's OpenJDK build with enterprise support for SAP customers. Directly comparable to Liberica JDK as a vendor-maintained OpenJDK distribution, though BellSoft has broader cross-industry positioning.

Broad incumbents

  • Oracle (Java): The dominant incumbent in commercial Java with Oracle JDK, GraalVM, and Java SE subscriptions. BellSoft's value prop of 'Oracle JDK drop-in replacement at up to 70% lower cost' is directly positioned against Oracle's pricing and licensing.
  • Red Hat (IBM): Distributor of Red Hat Build of OpenJDK and initiator of Project Hummingbird (hardened container images) — a project BellSoft's research directly influenced. Broad incumbent across enterprise Linux, middleware, and now container security.
  • Amazon (Corretto): Amazon's free, multi-platform OpenJDK distribution optimized for AWS. A free hyperscaler-backed alternative that pressures paid support economics across the entire commercial JDK category, including BellSoft.
  • Microsoft (Microsoft Build of OpenJDK): Microsoft's free OpenJDK distribution. Another free hyperscaler-backed alternative that competes with Liberica JDK at the free tier and pressures paid-support economics across the Java ecosystem.
  • Snyk: Multi-product developer security platform including container and open-source security scanning. Adjacent competitor to BellSoft's Hardened Images in container security, though Snyk focuses on scanning/detection rather than pre-hardened base images.

Emerging players

  • Chainguard: Well-capitalized startup specializing in hardened, minimal container images with near-zero CVEs. Most direct competitor to BellSoft's Hardened Images product line, with stronger venture backing and brand recognition in the container security category.

Regional players

  • Alibaba (Dragonwell): Alibaba's OpenJDK distribution optimized for large-scale e-commerce and cloud workloads. Comparable to BellSoft Liberica JDK as an OpenJDK build with enterprise support, but primarily serves the Chinese market and Alibaba Cloud ecosystem.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

BellSoft social profiles

Digital presence

BellSoft financial estimates

Financial estimate

Revenue estimate

Valuation estimate

BellSoft leadership team

Management profile

Number of profiles

Profiles1 record

BellSoft funding detail

Funding detail

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

BellSoft M&A and investment

M&A and investment

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BellSoft

What does BellSoft do?

BellSoft develops and distributes Liberica JDK, a TCK-verified, free open-source Java SE implementation that serves as an Oracle JDK drop-in replacement with enterprise-grade support. Around it the company bundles Alpaquita Linux (a Java-optimized Linux base), BellSoft Hardened Images (pre-hardened, near-zero CVE container images), and the Liberica Native Image Kit (GraalVM-based native compilation tooling), sold individually or as a unified Java runtime platform for cloud, container, and Kubernetes deployments.

Is BellSoft a public or private company?

BellSoft is a private company. It is classified as founder individual operated bootstrapped and is currently operating.

When was BellSoft founded?

BellSoft was founded in 2015. It employs 11 to 50 people.

Where is BellSoft based?

BellSoft is headquartered in San Jose, United States, in the North America region.

How does BellSoft make money?

Two revenue lines are on record. Enterprise Support Subscriptions are the primary driver. The others are hardened Container Images.

Who are BellSoft's main competitors?

Direct peers on record are Azul Systems, Eclipse Adoptium (Temurin) and SAP (SapMachine). Broad incumbents are Oracle (Java), Red Hat (IBM), Amazon (Corretto), Microsoft (Microsoft Build of OpenJDK) and Snyk. Chainguard is listed as an emerging player. Alibaba (Dragonwell) is listed as a regional player.

Does BellSoft have an API?

No public API is recorded for BellSoft.

What industry is BellSoft in?

BellSoft's product category is Java Runtime & Development Tools. Its primary akta.pro industry code is BPAEACAD, Cloud-Native Development (Containers, Kubernetes, Microservices), with a secondary code of BPAMAOAD, Developer Tooling & SDK Platforms. Its NAICS code is 513210 and its SIC code is 7372.

Unlock the full company data

50 free credits on sign-up, no credit card required.

Contact sales
Live signals
SD TimesBellSoft Announces Hardened Builder for Paketo Buildpacks for Zero-CVE ContainersBellSoft announced a hardened builder for Paketo buildpacks that automatically produces production-ready container images without a Dockerfile. The builder integrates BellSoft's security and compliance posture, with over 60% of developers unaware that poorly written Dockerfiles can become vulnerabilities. Each published image includes a full Software Bill of Materials and verifiable provenance.TechTargetBellSoft takes on Dockerfile sprawl with Hardened BuilderBellSoft introduced a Hardened Builder for Paketo Buildpacks that lets developers bypass Dockerfiles and use its secure, zero-CVE base image. The builder, based on BellSoft's Alpaquita OS, supports six language runtimes and is available on Docker Hub. It aims to centralize security controls and reduce vulnerability exposure.SD TimesSurvey: Spring Developers Have a Blindspot When It Comes to Container SecurityBellSoft surveyed 250 Spring developers, DevOps engineers, and Java architects at Spring I/O 2026, finding widespread security knowledge gaps: 64% were unaware Dockerfile authoring decisions affect security posture, 42% had never encountered hardened container images, and 44% could not name the compliance frameworks governing their container stack. The survey also revealed that 16% of respondents apply none of the five key container security practices (scanning, hardening, patching, SBOMs, and image signing), with most relying on cloud providers to manage a security domain that providers explicitly do not own under the shared responsibility model. BellSoft CEO Alex Belokrylov stated that controls embedded at the platform level achieve universal coverage, while those dependent on individual developer awareness do not, calling education and automation the urgent priorities.ChannelLife New ZealandSpring developers lack container security knowledgeBellSoft published a survey of 250 Spring developers, DevOps engineers and Java architects at Spring I/O in Barcelona that found widespread gaps in container security knowledge, with 64% unaware that Dockerfile authoring decisions affect security and 44% unable to name compliance frameworks governing their stack. The survey also found that 16% of respondents used none of five basic security practices assessed, and fewer than 2% had all five measures in place. BellSoft framed the findings as an education and automation priority, with CEO Alex Belokrylov stating that platform-level controls achieve more consistent coverage than controls dependent on individual developer awareness.InfoQBellSoft Survey Finds Container Security Practices Are Undermining Developers’ Own GoalsBellSoft released a survey of 427 developers finding that 23% have experienced a container security incident, with 62% attributing breaches to human error and 55% using general-purpose Linux distributions containing hundreds of unused packages that expand attack surfaces. The study revealed that 54% of developers consider shells essential in base images and 48% said pre-hardened security-focused base images would be the most helpful improvement to container security practices.SDxCentralContainers increasing the attack surface, developers cautionA Bellsoft survey of more than 400 developers found that nearly one in four respondents experienced a container-breach incident in the past year, with human error cited as the leading cause (62%) and extended gaps between vulnerability disclosure and remediation leaving organizations exposed. The survey identified pre-hardened, vendor-maintained base images as the most effective mitigation, prompting Red Hat to recently launch Project Hummingbird — a catalog of minimal, hardened container images aimed at reducing attack surfaces and achieving "zero-CVE" applications. Notable breaches referenced include a critical flaw in Docker Desktop for Windows/macOS and a vulnerability discovered by Wiz in the Nvidia Container Toolkit that allowed a malicious container to gain full root access to the host.ScworldJava developers struggle with container security, prefer provider solutionsBellSoft's 2025 State of Container Security report, based on a survey of 427 developers, found that 48% prefer delegating container security to specialized providers rather than managing it themselves. The survey revealed that 62% of developers cited human error as the primary cause of container security mistakes, with 55% using general-purpose Linux distributions and 69% using general-purpose JDKs that BellSoft argues are less secure due to bloat. The findings highlight a persistent gap between developers' security intentions and their actual practices, often driven by resource constraints and organizational limitations.The RegisterJava devs want container security - not the hassleBellSoft released its 2025 State of Container Security report based on a survey of 427 developers at Devoxx, finding that 48% prefer delegating container security to hardened container providers rather than making their own security decisions. The survey also found that 23% experienced container-related security incidents in the past year, with 62% of security mistakes attributed to human error and organizational time and resource constraints cited as compounding factors. BellSoft CEO argues that adopting hardened images shifts security burden to vendors, potentially reducing maintenance and cost burdens.PR NewswireContainer Security Issues Continue to Befuddle Software DevelopersBellSoft conducted a survey on container security revealing that 23% of professionals experienced a security incident, with human error and existing security practices being primary issues. The survey highlights the common use of vulnerable tools and infrequent updates, which increase security risks. BellSoft advocates for the adoption of pre-hardened, security-focused container images to improve security and reduce operational burdens.Cloud Native NowSurvey Surfaces Raft of Container Security ChallengesBellSoft published a survey of 427 IT professionals revealing that 23% experienced a cybersecurity incident in the past year, with human errors and mistakes (62%) identified as the main source of vulnerabilities in container application environments. The survey found low adoption of security practices, including only 43% using vulnerability scanning tools, 18% using software bill of materials tools, and 16% using image signing, while 36% of respondents said container security is not an organizational priority. The findings suggest IT teams lack sufficient insight into vulnerabilities within their applications, particularly given that only 6% use hardware virtualization solutions.