Skip to main content
The Determinate platform

One platform for reliable, secure Nix

Determinate Nix, Determinate Secure Packages, and FlakeHub work as one system, making Nix reliable, secure, and production ready across coding agents, developer laptops, continuous integration (CI), the cloud, and edge devices.

The Determinate platform

The Determinate platform architectureDeterminate Secure Packages supplies trusted, signed packages to FlakeHub, which caches and distributes artifacts to developer laptops, CI/CD, the cloud, and the edge. Every layer runs on Determinate Nix, the secure, stable, validated enterprise distribution of Nix that acts as the deterministic engine underneath.The trusted supplyThe cache and registryEvery environmentDeterminateSecure Packages100,000+ signed packages7-day CVE remediation SLAFlakeHubBinary cachePrivate flakesReal semantic versioningDeveloper laptopsCI/CDCloudEdgeThe engineDeterminate NixThe secure, stable, validated enterprise distribution of Nix.A deterministic engine for every environment, providing reproducibility and provenance you can verify.

Three layers, one supply chain solution

A deterministic engine, packages you can trust, and one binary cache shared by every machine. That's your new supply chain, from source to production.

Determinate Nix: learn more

The engine

Determinate Nix

The secure, stable, validated enterprise distribution of Nix that builds, runs, and deploys your software the same way on every machine.

  • Lazy trees: 3x or more faster evaluation
  • Parallel evaluation across every core
  • Stable flakes, on by default
Learn more
FlakeHub: learn more

The cache and registry

FlakeHub

The all-in-one hub for Nix. Cache binary artifacts once, share private flakes across your org, and depend on real semantic versions.

  • FlakeHub Cache, shared laptop to production
  • Private flakes with federated authentication
  • FedRAMP High authorized
Learn more
Determinate Secure Packages: learn more

The trusted supply

Determinate Secure Packages

A commercially supported, drop-in replacement for Nixpkgs. The same 100,000+ packages, signed and audited, behind every build.

  • 7-day remediation for Common Vulnerabilities and Exposures (CVEs)
  • Cryptographic signing and provenance
  • Software Bills of Materials (SBOMs) via FlakeBOM
  • Builds that meet Federal Information Processing Standards (FIPS)
Learn more

Production ready everywhere

The same platform, the same guarantees, the same industry-leading supply chain solution, wherever your team runs Nix.

Backed by Nix experts

Never troubleshoot Nix alone

When Nix is critical infrastructure, expert help should be one message away. Enterprise Nix Support gives your team contractual SLAs, a dedicated Slack channel, and direct access to Determinate's engineers, so your platform stays resilient at any scale.

  • Issue investigation within one business hour, backed by service credits
  • A shared, dedicated Slack channel for real-time support
  • Direct access to Nix experts, including Eelco Dolstra, the creator of Nix
  • Annual architecture and security hardening reviews