A production-grade, self-hosted Docker management platform built with Go. Containers, stacks, security scanning, monitoring, multi-node, reverse proxy, RDP, and more — all from a single binary. No vendor lock-in. No telemetry. Deploy in 60 seconds.
No plugins, no extensions, no external services. Built-in from day one, shipped as a single binary.
Full lifecycle control with bulk operations, real-time stats, exec terminal, filesystem browser, environment editor, and network/volume inspection.
Deploy Docker Compose stacks from YAML, from Git repositories, or from the built-in template catalog. Visual editor, env vars, Git-triggered auto-deploy.
Initialize swarm clusters, manage nodes, deploy HA services, scale replicas, and convert standalone containers to swarm services.
Trivy CVE scanning, CIS Docker Benchmark, SBOM in CycloneDX & SPDX, composite security score (0–100), trend tracking, and exportable reports.
Real-time CPU, memory, disk I/O, and network metrics via WebSocket. Threshold-based alert rules with 11 notification channels including Slack, PagerDuty, and Telegram.
Built-in Nginx reverse proxy with automatic Let's Encrypt HTTPS, custom certificates, DNS-01 wildcard support, and HSTS.
Embedded authoritative DNS server powered by miekg/dns. Manage zones, records (A, AAAA, CNAME, MX, TXT, SRV, and more), TSIG keys, and upstream forwarding. Service Discovery auto-registers containers as DNS records — redis.containers.local resolves to your container's IP.
Web-based cron job scheduling. Create, edit, enable/disable, and run jobs from the UI. Shell commands, Docker exec, and HTTP webhooks. Full execution history with output and duration tracking.
Master/agent architecture over NATS JetStream with mTLS. Deploy agents to remote hosts via SSH directly from the web UI. Seamless host switching.
Multi-tab xterm.js terminal with container exec and host SSH. Full Monaco (VS Code) editor and Neovim in the browser. SFTP file browser.
Browser-based Remote Desktop (RDP) and VNC via Apache Guacamole. Manage Windows servers and Linux desktops without a separate RDP client.
Connect to PostgreSQL, MySQL, MariaDB, MongoDB, Redis, and SQLite from the browser. Execute queries, browse tables. Full LDAP directory browser with group management.
Scheduled container and stack backups with cron, AES encryption, gzip/zstd compression. Destinations: local, S3, MinIO, SFTP, Azure Blob, GCS, Backblaze B2.
TOTP 2FA, API keys, audit log, 46 permissions across 13 categories. Business adds OAuth2/OIDC (GitHub, Google, Microsoft), LDAP/Active Directory, and custom roles.
15 built-in browser utilities: Base64/URL/hex encoders, JSON/YAML formatters, UUID/password generators, hash calculator, CIDR calculator, regex tester, JWT decoder, and more.
Schedule maintenance windows, track SLA deadlines, and coordinate team tasks. Integrated with the job scheduler for automated backup, scan, and metric collection schedules.
Automatically detect configuration drift between expected and actual container state. Chronological audit trail of all infrastructure changes with filterable timeline.
Visual iptables/nftables management from the web UI. Create, edit, delete rules across INPUT, OUTPUT, FORWARD, and DOCKER-USER chains. Apply to hosts, sync from hosts, full audit log.
TLS/SSL certificate scanner with SSL Labs-style grading (A+ to F). Protocol analysis, cipher suite evaluation, certificate chain validation, OCSP stapling, and Certificate Transparency detection. Expiring cert alerts.
Automated backup integrity verification. Extract, container, and database verification methods. Checksum validation, file readability checks, schedulable via cron with detailed pass/fail reports.
Build Docker images from Dockerfiles directly in the UI. Multi-stage builds, build arguments, platform targeting (amd64/arm64), Dockerfile templates, real-time build logs, and registry push.
Automatic stack rollback on deploy failure, health check failure, or container exit code errors. Configurable rollback policies per stack, deploy snapshots, one-click manual rollback, and rollback notifications.
Native WireGuard VPN management with auto-generated Curve25519 key pairs, peer management with QR config generation, transfer statistics per interface and peer, and multi-interface support (wg0, wg1, etc.).
Curated app marketplace with one-click Docker Compose deployment. Browse by category, discover featured and verified apps, read ratings and reviews, and submit your own community apps.
No Kubernetes, no cloud accounts, no SaaS subscriptions. Just Docker and one command.
Run the install script on any Linux server. Secrets (DB passwords, JWT keys, encryption keys) are generated automatically. PostgreSQL, Redis, and NATS spin up alongside usulnet in under 60 seconds.
Add remote Docker hosts as agents via SSH directly from the UI — no manual configuration on the remote side. Connect SSH servers, databases, LDAP directories, Git providers, and registries.
Containers, stacks, images, volumes, networks, security scans, monitoring, reverse proxy, backups, RDP sessions, web terminals, and file editing — all from a single, fast web UI.
A single Go binary with no runtime dependencies. Templates are compiled at build time with Templ. No Node.js, no Python, no Electron, no heavy frontend frameworks. Just fast, reliable infrastructure management.
More features at a fraction of the cost — and you own every byte.
| Feature | usulnet CE + Business |
Portainer CE | Portainer Business |
|---|---|---|---|
| License | AGPLv3 / Commercial | zlib (open) | Proprietary |
| Starting price | Free (CE) / €79 node/yr | Free | $$$ |
| Trivy CVE scanning & SBOM | ✔ | — | — |
| Security score & CIS Benchmark | ✔ | — | Partial |
| Built-in monitoring & alerts | ✔ | — | ✔ |
| Reverse proxy (Nginx) | ✔ | — | — |
| Embedded DNS server | ✔ | — | — |
| Crontab manager | ✔ | — | — |
| Interactive network topology graph | ✔ | — | — |
| RDP / VNC browser access | ✔ | — | — |
| Database browser (Postgres, MySQL…) | ✔ | — | — |
| Monaco editor + Neovim in browser | ✔ | — | — |
| Scheduled backups to S3/SFTP/B2 | ✔ | — | ✔ |
| Git provider integration | ✔ | — | ✔ |
| OAuth2 / OIDC / LDAP | Business | — | ✔ |
| Custom RBAC roles | Business (46 permissions) | — | ✔ |
| App template catalog (144+ apps) | ✔ | ✔ | ✔ |
| Multi-node (agents) | ✔ | 3 nodes (CE limit) | ✔ |
| Telemetry / phone-home | None (CE: fully offline) | Optional | Optional |
Comparison based on publicly available information. Features may change — see documentation for current details.
Start free with Community Edition. Upgrade when your team and infrastructure need more.
All paid editions include a 30-day trial. Manage your license and release instances at id.usulnet.com.
Deploy in under 60 seconds with Docker Compose. No credit card required for Community Edition. Self-hosted, open source, and fully under your control from day one.
curl -fsSL https://raw.githubusercontent.com/fr4nsys/usulnet/main/deploy/install.sh | bash