> ## Documentation Index
> Fetch the complete documentation index at: https://docs.root.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Free Trial

> Get full access to Root's secure supply platform — container images and application libraries — free for 2 months.

Root is offering a free, self-service trial with full product access in response to the Q1 2026 supply chain attacks that compromised widely used packages including Trivy, LiteLLM, and axios. [Read the full background on our blog](https://www.root.io/blog/root-has-a-fix-q1-2026).

## What's included

The free trial gives you the same access as a paid Root organization:

| Capability                                          | Included |
| --------------------------------------------------- | -------- |
| Root Image Catalog (RIC) — `cr.root.io`             | ✅        |
| Root Library Catalog (RLC) — `pkg.root.io`          | ✅        |
| UI, API, and package registry access                | ✅        |
| Python, JavaScript, Java, and Go package registries | ✅        |
| SBOM, VEX, and provenance attestations              | ✅        |
| FIPS images                                         | ❌        |
| Jira SLA-backed support tickets                     | ❌        |

<Note>
  The free trial provides full product access without a service-level agreement (SLA). For SLA-backed support, [contact us](https://www.root.io/contact) about a paid plan.
</Note>

## Trial duration

The free trial runs for **2 months**, ending **May 31, 2026** for all trial organizations. The trial period is based on a fixed end date, not the date you sign up — so the earlier you start, the more time you get.

## Sign up

<Steps>
  <Step title="Create your account">
    Go to [app.root.io](https://app.root.io/) and sign up. Your organization is automatically provisioned with full trial access — no approval process, no credit card.
  </Step>

  <Step title="Generate an API token">
    After creating your organization, generate an API token from the Root UI. You'll need this to authenticate with Root's registries.
  </Step>

  <Step title="Start pulling secure packages">
    Configure your package manager or Docker client to point at Root's registries. See the guides below to get started.
  </Step>
</Steps>

## What to expect

When you sign in for the first time, you'll land in the Root platform where you can browse the **Image Catalog** and **Library Catalog**.

### Container images

Replace your base image references with `cr.root.io` to pull pre-patched images with zero Critical/High CVEs:

```dockerfile theme={null}
# Before
FROM python:3.12-slim

# After — same image, vulnerabilities removed
FROM cr.root.io/python:3.12-slim
```

See [Getting Started with RIC](/ric/getting-started) for full setup instructions.

### Application libraries

Point your package manager at `pkg.root.io` to install patched versions of Python, JavaScript, Java, and Go packages — including packages compromised in the Q1 2026 supply chain campaigns:

<Tabs>
  <Tab title="Python (pip)">
    ```bash theme={null}
    pip config set global.index-url https://pkg.root.io/pypi/simple
    pip config set global.extra-index-url https://pypi.org/simple
    ```
  </Tab>

  <Tab title="JavaScript (npm)">
    ```bash theme={null}
    npm config set registry https://pkg.root.io/npm/ --location=project
    npm config set //pkg.root.io/npm/:_authToken YOUR_ROOT_TOKEN --location=project
    ```
  </Tab>

  <Tab title="Java (Maven)">
    ```xml theme={null}
    <!-- ~/.m2/settings.xml -->
    <server>
      <id>root-io</id>
      <username>rootio</username>
      <password>${env.ROOT_TOKEN}</password>
    </server>
    <mirror>
      <id>root-io</id>
      <url>https://pkg.root.io/maven/</url>
      <mirrorOf>central</mirrorOf>
    </mirror>
    ```
  </Tab>

  <Tab title="Go">
    ```bash theme={null}
    # Configure GOPROXY
    export GOPROXY="https://:${ROOTIO_API_KEY}@pkg.root.io/gobinary,https://proxy.golang.org,direct"

    # Use the Root Patcher CLI to add replace directives
    rootio_patcher go remediate --dry-run=false
    go build ./...
    ```
  </Tab>
</Tabs>

See [Getting Started with RLC](/rlc/getting-started) for full setup instructions including CI/CD integration.

### Packages secured in Q1 2026

Root has already produced secured versions for every package compromised in the Q1 2026 supply chain campaigns:

| Package                       | Safe version      | Ecosystem    |
| ----------------------------- | ----------------- | ------------ |
| `aquasec/trivy`               | 0.69.3            | Docker (RIC) |
| `litellm`                     | 1.82.6            | PyPI         |
| `axios`                       | 1.14.0            | npm          |
| `telnyx`                      | 4.87.0 / 4.88.1   | npm          |
| `@opengov/ppf-backend-types`  | 1.141.1 / 1.141.3 | npm          |
| `react-leaflet-heatmap-layer` | 2.0.0             | npm          |
| `@emilgroup/insurance-sdk`    | 1.97.0 / 1.98.0   | npm          |
| `@opengov/form-builder`       | 0.12.2 / 0.13.0   | npm          |
| `@opengov/form-renderer`      | 0.2.19            | npm          |
| `@emilgroup/billing-sdk`      | 1.56.0 / 1.57.0   | npm          |
| `@emilgroup/customer-sdk`     | 1.54.0            | npm          |

These are the last known-good versions before each compromise. Root pins you to these versions and backports security fixes without requiring upgrades.

## What happens after the trial

When the trial ends on May 31, 2026, your organization's `free_trial` entitlement will be removed. To continue using Root:

* **Upgrade to a paid plan** — [Contact us](https://www.root.io/contact) or [book a demo](https://www.root.io/book-a-demo) to discuss pricing and SLA options.
* **Talk to a human** — Use the chat on [root.io](https://root.io) to reach our team directly.

<Warning>
  After May 31, 2026, trial organizations will lose access to Root's registries. Make sure to plan your transition before the trial ends.
</Warning>

## Getting help

During the trial, you can get support through the following channels:

<CardGroup cols={2}>
  <Card title="Documentation" icon="book" href="https://docs.root.io">
    Full product docs, setup guides, and API reference.
  </Card>

  <Card title="Talk to us" icon="comments" href="https://root.io">
    Use the chat widget on root.io to reach the Root team.
  </Card>
</CardGroup>

## Next steps

<CardGroup cols={2}>
  <Card title="Quick Start" icon="rocket" href="/quickstart">
    Get secure open source into your pipeline in minutes.
  </Card>

  <Card title="How Root Works" icon="gears" href="/getting-started/how-it-works">
    Understand pinning, backporting, and AVR.
  </Card>

  <Card title="Root Image Catalog" icon="docker" href="/ric/overview">
    Explore pre-patched container images.
  </Card>

  <Card title="Root Library Catalog" icon="cube" href="/rlc/overview">
    Set up secure Python, JavaScript, Java, and Go packages.
  </Card>
</CardGroup>