Security and compliance / Container and cloud workload security
Clair
What Clair publishes on quay.io, measured on 2026-09-02. Every line links the page we found it on, or lists the addresses we checked.
Not enough data: 2 of 12 criteria measured, so no transparency score
Not ranked: we could measure 2 of 12 criteria, below our thresholdchecked 2026-09-02
1 gap found: one criterion not found at the addresses we checked. 1 found1 not found10 not measured
Public transparency score, not a product or security rating. That is a statement about our measurement, not about Clair.
Transparency labelsaas-ranking.com
Clair
- A
- B
- C
- D
- E
- F
Published commitments9 not measured
- not measuredData processing agreement×3
- not measuredSubprocessor list×3
- not measuredData location stated×3
- not measuredStatus page with history×2
- not measuredPublic pricing×2
- not measuredNotice before subprocessors change×2
- not measuredCertifications named×1
- not measuredUptime SLA with a figure×1
- not measuredNamed privacy contact×1
Measured behaviour1 of 2 found, 1 not measured
- foundHTTPS enforced with HSTS×2
- not foundNo third-party tracking before consent×2
- not measuredsecurity.txt (RFC 9116)×1
Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.
We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.
Show the full transparency label
Transparency labelsaas-ranking.com
Clair
- A
- B
- C
- D
- E
- F
Published commitments9 not measured
- not measuredData processing agreement×3
- not measuredSubprocessor list×3
- not measuredData location stated×3
- not measuredStatus page with history×2
- not measuredPublic pricing×2
- not measuredNotice before subprocessors change×2
- not measuredCertifications named×1
- not measuredUptime SLA with a figure×1
- not measuredNamed privacy contact×1
Measured behaviour1 of 2 found, 1 not measured
- foundHTTPS enforced with HSTS×2
- not foundNo third-party tracking before consent×2
- not measuredsecurity.txt (RFC 9116)×1
Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.
We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.
Not found, heaviest first
No third-party tracking before consent
weight 2 of 3No consent-free first load found.
Checked 1 address on 2026-09-02.
Show the 1 address we checked
https://quay.io/– third-party requests before any interaction: adobedc.demdex.net, analytics.twitter.com, assets.adobedtm.com, cdn.statuspage.io, cm.everesttech.net, cm.g.doubleclick.net, consent.trustarc.com, dn6mqn7xvzz3.statuspage.io, dpm.demdex.net, js.stripe.com, m.stripe.com, m.stripe.network, match.adsrvr.org, match.prod.bidr.io, ml314.com, s3.amazonaws.com, smetrics.redhat.com, static.redhat.com, www.redhat.com, www.youtube.com
Published evidence 1
HTTPS enforced with HSTS
weight 2 of 3HTTP redirects to HTTPS and the HSTS header is set.
Source: https://quay.io/ · checked 2026-09-02
Not measured by us 10
Data processing agreement
weight 3 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 8 addresses we checked
https://quay.io/legal/dpa– excluded by robots.txthttps://quay.io/dpa– excluded by robots.txthttps://quay.io/legal/data-processing-agreement– excluded by robots.txthttps://quay.io/data-processing-agreement– excluded by robots.txthttps://quay.io/legal/data-processing-addendum– excluded by robots.txthttps://quay.io/legal/gdpr– excluded by robots.txthttps://quay.io/trust/dpa– excluded by robots.txthttps://quay.io/privacy/dpa– excluded by robots.txt
Subprocessor list
weight 3 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 7 addresses we checked
https://quay.io/legal/subprocessors– excluded by robots.txthttps://quay.io/subprocessors– excluded by robots.txthttps://quay.io/sub-processors– excluded by robots.txthttps://quay.io/legal/sub-processors– excluded by robots.txthttps://quay.io/trust/subprocessors– excluded by robots.txthttps://quay.io/privacy/subprocessors– excluded by robots.txthttps://quay.io/legal/subprocessor-list– excluded by robots.txt
Data location stated
weight 3 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 7 addresses we checked
https://quay.io/security– excluded by robots.txthttps://quay.io/trust– excluded by robots.txthttps://quay.io/legal/privacy– excluded by robots.txthttps://quay.io/privacy– excluded by robots.txthttps://quay.io/privacy-policy– excluded by robots.txthttps://quay.io/compliance– excluded by robots.txthttps://quay.io/legal/privacy-policy– excluded by robots.txt
Status page with history
weight 2 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 3 addresses we checked
https://status.quay.io/– excluded by robots.txthttps://quay.io/status– excluded by robots.txthttps://quay.io.statuspage.io/– excluded by robots.txt
Public pricing
weight 2 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 5 addresses we checked
https://quay.io/pricing– excluded by robots.txthttps://quay.io/pricing/– excluded by robots.txthttps://quay.io/plans– excluded by robots.txthttps://quay.io/en/pricing– excluded by robots.txthttps://quay.io/pricing-plans– excluded by robots.txt
Notice before subprocessors change
weight 2 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 8 addresses we checked
https://quay.io/legal/subprocessors– excluded by robots.txthttps://quay.io/subprocessors– excluded by robots.txthttps://quay.io/sub-processors– excluded by robots.txthttps://quay.io/legal/dpa– excluded by robots.txthttps://quay.io/dpa– excluded by robots.txthttps://quay.io/legal/data-processing-agreement– excluded by robots.txthttps://quay.io/trust/subprocessors– excluded by robots.txthttps://quay.io/legal/sub-processors– excluded by robots.txt
Certifications named
weight 1 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 6 addresses we checked
https://quay.io/security– excluded by robots.txthttps://quay.io/trust– excluded by robots.txthttps://quay.io/trust-center– excluded by robots.txthttps://quay.io/compliance– excluded by robots.txthttps://quay.io/legal/security– excluded by robots.txthttps://trust.quay.io/– excluded by robots.txt
Uptime SLA with a figure
weight 1 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 6 addresses we checked
https://quay.io/legal/sla– excluded by robots.txthttps://quay.io/sla– excluded by robots.txthttps://quay.io/legal/service-level-agreement– excluded by robots.txthttps://quay.io/trust/sla– excluded by robots.txthttps://quay.io/uptime– excluded by robots.txthttps://quay.io/legal/uptime-sla– excluded by robots.txt
security.txt (RFC 9116)
weight 1 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 1 address we checked
https://quay.io/.well-known/security.txt– excluded by robots.txt
Named privacy contact
weight 1 of 3Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.
Show the 7 addresses we checked
https://quay.io/legal/privacy– excluded by robots.txthttps://quay.io/privacy– excluded by robots.txthttps://quay.io/privacy-policy– excluded by robots.txthttps://quay.io/legal/privacy-policy– excluded by robots.txthttps://quay.io/legal/privacy-notice– excluded by robots.txthttps://quay.io/trust/privacy– excluded by robots.txthttps://quay.io/datenschutz– excluded by robots.txt