Code Signing and Installers,
Officially Solved.
Package your compiled binaries into a signed and notarized installer ready for distribution.
Why?
The gap between building and shipping
You built the app. Now try getting it to your users.
Unsigned apps are blocked
“This app is damaged and can’t be opened.”
“This app might put your PC at risk.”
Sealed apps are recognized by both operating systems. Your users see a trusted publisher name instead of a security warning.
Signing requires multiple accounts and identity validation
Windows EV signing requires an Azure tenant, corporate identity validation, tax records, and a third-party verification process that can take weeks.
Upload your binaries, configure your installer, and we handle all signing and notarization. No accounts to open, no identity validation, no waiting.
Costly annual subscriptions required
Why pay a subscription at all if you only deploy a few builds per year? Pay as you need with as little as $5/seal, or subscribe from $25/month.
Platform-specific local tools
Different tools for every platform, each with their own syntax and quirks. Build scripts break between OS versions and require platform-specific knowledge to debug.
We build your installer in the cloud. Both platforms, custom configuration, completely free.
How?
The same workflow for both platforms.
Upload your binaries and get signed, notarized installers with your custom branding.
- 1Sign binaries
- 2Customize and build installer
- 3Sign and notarize installer
- 1Sign binaries
- 2Customize and build installer
- 3Sign and notarize installer
Three ways to build.
Use whichever fits your workflow. Same inputs, same output.
Visual installer builder with a live preview. Drag in your files, add your logo, and see exactly what your users will see, before you build.
First-time code signing. Solo developers. Quick one-off builds.
Build and sign installers with one command, or launch interactive mode for a guided experience.
$ sealapp build --sealedLocal scripts. CI/CD pipelines. Developers who prefer the terminal.
Embed code signing directly into your product. Ship signed installers from your own app, platform, or internal tooling.
POST /v1/buildsYour own apps and platforms. Internal tooling. AI agent integrations.
How Much?
Pay per seal. Unsigned installers are FREE.
Seal tokens are only used on production ready installers. Configure and test as much as you need, at no cost. Seal tokens never expire.
Or get CLI & API access via subscription.
Includes monthly seals. Overflow uses your token balance.