SaaS Ranking

Security and compliance / Container and cloud workload security

Clair

What Clair publishes on quay.io, measured on 2026-09-02. Every line links the page we found it on, or lists the addresses we checked.

Not enough data: 2 of 12 criteria measured, so no transparency score

Not ranked: we could measure 2 of 12 criteria, below our thresholdchecked 2026-09-02

1 gap found: one criterion not found at the addresses we checked. 1 found1 not found10 not measured

Public transparency score, not a product or security rating. That is a statement about our measurement, not about Clair.

Transparency labelsaas-ranking.com

Clair

quay.io · Container and cloud workload security

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
Not enough data2 of 12 measured, no score

Published commitments9 not measured

Measured behaviour1 of 2 found, 1 not measured

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Show the full transparency label

Transparency labelsaas-ranking.com

Clair

quay.io · Container and cloud workload security

  1. A
  2. B
  3. C
  4. D
  5. E
  6. F
Not enough data2 of 12 measured, no score

Published commitments9 not measured

Measured behaviour1 of 2 found, 1 not measured

Checked 2026-09-02. Every line links the page we found it on. A cross means we found nothing at the addresses we checked, not that the vendor has no such document. A transparency score, not a product rating.

We do not issue badges: a badge is the first step towards a paid placement, and there is none here. The SVG is a document with the date in it, for your own files.

Not found, heaviest first

No third-party tracking before consent

weight 2 of 3

No consent-free first load found.

Checked 1 address on 2026-09-02.

Show the 1 address we checked
  1. https://quay.io/ – third-party requests before any interaction: adobedc.demdex.net, analytics.twitter.com, assets.adobedtm.com, cdn.statuspage.io, cm.everesttech.net, cm.g.doubleclick.net, consent.trustarc.com, dn6mqn7xvzz3.statuspage.io, dpm.demdex.net, js.stripe.com, m.stripe.com, m.stripe.network, match.adsrvr.org, match.prod.bidr.io, ml314.com, s3.amazonaws.com, smetrics.redhat.com, static.redhat.com, www.redhat.com, www.youtube.com

Is this wrong? Send us the URL

Published evidence 1

HTTPS enforced with HSTS

weight 2 of 3

HTTP redirects to HTTPS and the HSTS header is set.

Source: https://quay.io/ · checked 2026-09-02

Not measured by us 10

Data processing agreement

weight 3 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 8 addresses we checked
  1. https://quay.io/legal/dpa – excluded by robots.txt
  2. https://quay.io/dpa – excluded by robots.txt
  3. https://quay.io/legal/data-processing-agreement – excluded by robots.txt
  4. https://quay.io/data-processing-agreement – excluded by robots.txt
  5. https://quay.io/legal/data-processing-addendum – excluded by robots.txt
  6. https://quay.io/legal/gdpr – excluded by robots.txt
  7. https://quay.io/trust/dpa – excluded by robots.txt
  8. https://quay.io/privacy/dpa – excluded by robots.txt

Is this wrong? Send us the URL

Subprocessor list

weight 3 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 7 addresses we checked
  1. https://quay.io/legal/subprocessors – excluded by robots.txt
  2. https://quay.io/subprocessors – excluded by robots.txt
  3. https://quay.io/sub-processors – excluded by robots.txt
  4. https://quay.io/legal/sub-processors – excluded by robots.txt
  5. https://quay.io/trust/subprocessors – excluded by robots.txt
  6. https://quay.io/privacy/subprocessors – excluded by robots.txt
  7. https://quay.io/legal/subprocessor-list – excluded by robots.txt

Is this wrong? Send us the URL

Data location stated

weight 3 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 7 addresses we checked
  1. https://quay.io/security – excluded by robots.txt
  2. https://quay.io/trust – excluded by robots.txt
  3. https://quay.io/legal/privacy – excluded by robots.txt
  4. https://quay.io/privacy – excluded by robots.txt
  5. https://quay.io/privacy-policy – excluded by robots.txt
  6. https://quay.io/compliance – excluded by robots.txt
  7. https://quay.io/legal/privacy-policy – excluded by robots.txt

Is this wrong? Send us the URL

Status page with history

weight 2 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 3 addresses we checked
  1. https://status.quay.io/ – excluded by robots.txt
  2. https://quay.io/status – excluded by robots.txt
  3. https://quay.io.statuspage.io/ – excluded by robots.txt

Is this wrong? Send us the URL

Public pricing

weight 2 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 5 addresses we checked
  1. https://quay.io/pricing – excluded by robots.txt
  2. https://quay.io/pricing/ – excluded by robots.txt
  3. https://quay.io/plans – excluded by robots.txt
  4. https://quay.io/en/pricing – excluded by robots.txt
  5. https://quay.io/pricing-plans – excluded by robots.txt

Is this wrong? Send us the URL

Notice before subprocessors change

weight 2 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 8 addresses we checked
  1. https://quay.io/legal/subprocessors – excluded by robots.txt
  2. https://quay.io/subprocessors – excluded by robots.txt
  3. https://quay.io/sub-processors – excluded by robots.txt
  4. https://quay.io/legal/dpa – excluded by robots.txt
  5. https://quay.io/dpa – excluded by robots.txt
  6. https://quay.io/legal/data-processing-agreement – excluded by robots.txt
  7. https://quay.io/trust/subprocessors – excluded by robots.txt
  8. https://quay.io/legal/sub-processors – excluded by robots.txt

Is this wrong? Send us the URL

Certifications named

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 6 addresses we checked
  1. https://quay.io/security – excluded by robots.txt
  2. https://quay.io/trust – excluded by robots.txt
  3. https://quay.io/trust-center – excluded by robots.txt
  4. https://quay.io/compliance – excluded by robots.txt
  5. https://quay.io/legal/security – excluded by robots.txt
  6. https://trust.quay.io/ – excluded by robots.txt

Is this wrong? Send us the URL

Uptime SLA with a figure

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 6 addresses we checked
  1. https://quay.io/legal/sla – excluded by robots.txt
  2. https://quay.io/sla – excluded by robots.txt
  3. https://quay.io/legal/service-level-agreement – excluded by robots.txt
  4. https://quay.io/trust/sla – excluded by robots.txt
  5. https://quay.io/uptime – excluded by robots.txt
  6. https://quay.io/legal/uptime-sla – excluded by robots.txt

Is this wrong? Send us the URL

security.txt (RFC 9116)

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 1 address we checked
  1. https://quay.io/.well-known/security.txt – excluded by robots.txt

Is this wrong? Send us the URL

Named privacy contact

weight 1 of 3

Not measured. The vendor’s robots.txt excludes us from at least one of these addresses, so this was not measured.

Show the 7 addresses we checked
  1. https://quay.io/legal/privacy – excluded by robots.txt
  2. https://quay.io/privacy – excluded by robots.txt
  3. https://quay.io/privacy-policy – excluded by robots.txt
  4. https://quay.io/legal/privacy-policy – excluded by robots.txt
  5. https://quay.io/legal/privacy-notice – excluded by robots.txt
  6. https://quay.io/trust/privacy – excluded by robots.txt
  7. https://quay.io/datenschutz – excluded by robots.txt

Is this wrong? Send us the URL

Keep going