A company called Minimus has released free software that helps developers build applications more securely. The software, in the form of container images (pre-made digital packages that applications need to run), promises to cut security vulnerabilities by more than 95 percent.

Containers are essentially the building blocks of modern software deployment. Think of a container like a shipping container—a sealed box with everything an application needs to run inside. The problem with standard containers is that they often include a lot of extra software that the application will never actually use. Each piece of extra software is a potential security weak point.

Minimus's approach removes all that unnecessary stuff. It includes only the exact components an application needs to function, leaving out system tools, interpreters, and package managers that create security risk without providing benefit. The company launched at RSAC in April 2025.

Why This Matters Right Now

The container software market has been changing rapidly. A company called Bitnami, which provided free container building blocks that many developers relied on, switched to a paid model in September 2025. Another provider, MinIO, stopped offering free software in October 2025. Even Docker, one of the biggest names in the field, released a security-focused paid version of its container images in December 2025.

For teams building and deploying applications, this meant the easy availability of free, well-maintained container software was disappearing. Minimus fills that gap by offering free alternatives.

How It Works

The key insight is simple: less software means fewer places for attackers to break in. A typical container image includes hundreds of software components. Most applications use only a fraction of them. Each component, however small, carries security risk and needs monitoring for flaws.

By stripping everything down to essentials, Minimus eliminates most of that risk without the constant work of patching and updating unused software.

It is worth noting that the 95-percent figure comes from Minimus itself. Independent verification would give organizations more confidence in the number, though the basic logic—that fewer components mean fewer vulnerabilities—is straightforward and proven.

The Bigger Picture

For teams running hundreds or thousands of applications, the real benefit of simpler container images is not just security. It is the dramatic reduction in security-checking work. Fewer components means fewer alerts to review, faster decision-making, and less time spent on false alarms. The time savings compound across large deployments.

The container industry is entering a more competitive phase. With Docker's hardened images, other vendors like Chainguard, and now Minimus all offering security-focused alternatives, teams have real choices beyond the general-purpose containers that dominated for years. That competition pushes the entire industry toward better security practices, which is a positive shift for organizations of any size.