Docker Hardened Images used to be locked behind Docker Business and Enterprise plans, typically costing teams $200–300 per developer per year.
Now they are open source and available to everyone.
This matters because most container CVEs come from base images, not application code. Teams paid to reduce that noise or accepted the risk.
By removing the paywall, Docker is pushing secure base images from “enterprise upgrade” to baseline.