
Arcane
5.8/10Arcane is a free, open-source, self-hosted web interface for managing Docker containers, Compose projects, images, volumes and networks across one or more hosts.
Data last updated November 2026 · Our methodology
Overview
Arcane is a self-hosted Docker management dashboard. It has a Go backend and runs as a single container. It talks to the Docker Engine API, usually through the Docker socket or a socket proxy, and gives you one web UI for containers, images, volumes, networks and Compose projects. Compose projects are kept as real files on disk, so the dashboard and the docker compose command on the host work from the same definitions. Other features include live log streaming, an exec shell in the browser, and CPU, memory and network graphs. It scans images for vulnerabilities with Trivy, patches images with Copacetic, and can update images one at a time or in bulk. You can send notifications through Discord, email or Apprise, and you can manage remote hosts through an agent that runs in either Direct or Edge mode. Login options include local accounts, OIDC with group-to-role mapping, passkeys, MFA and role-based access control. There is a REST API documented with OpenAPI 3.1. Recent releases added S3 and Git backups and native Podman support. Arcane is released under the BSD-3-Clause license and the project says it will always be free, with no paid tiers and no features held back. It suits developers, home-lab users and small IT teams who want a lighter, fully open alternative to Portainer for single-host or small-fleet Docker setups. Its main limitation is scope: it does not manage Kubernetes, Swarm support is limited, it does not provide hosting or compute itself, and there is no commercial support or SLA behind it. Because it needs Docker socket access, it has root-equivalent control of the host, so it should run behind a socket proxy and a TLS reverse proxy.
Our Rating
Who Arcane is best for
Best software for DevelopersGood fit
It is a free UI for managing Docker and Compose, with an API, logs and an exec shell, which is aimed squarely at developers who self-host.
Less suited
RBAC, OIDC and agent-based fleet management help small ops teams, but it has no Kubernetes support and no vendor support.
It costs nothing and runs as one container, but someone needs Docker skills to set it up and secure it.
Reviewers call it a newer project with fewer enterprise features, and it has no commercial support or SLA.
Pros & Cons
Pros
- Fully free under the BSD-3-Clause license with no features held back, unlike Portainer's limited free tier.
- Compose projects are stored as plain files on disk, so the UI and the host CLI stay in sync.
- Trivy vulnerability scanning and Copacetic image patching are built into the UI.
- Remote hosts can be added through an agent, including an Edge mode that needs no inbound port.
- Simple footprint of one Go container and a volume, with a fast release cadence.
Cons
- No Kubernetes management, and Swarm support is limited.
- Needs Docker socket access, which is root-equivalent on the host, so a socket proxy is recommended.
- Serves plain HTTP by default and needs a TLS reverse proxy with websocket headers set correctly.
- Image scanning can use a lot of CPU and RAM on small machines.
- No commercial support or SLA, only community channels such as GitHub and Discord.
Key Features
Not included
- Managed WordPress
- Uptime SLA
- Managed Kubernetes
- Shared Hosting
Arcane Pricing
Open Source
- REST API
- OIDC, passkeys, MFA and RBAC
- Trivy vulnerability scanning
- BSD-3-Clause license with no feature gating
- Unlimited self-hosted environments through the agent
Frequently Asked Questions
Yes. Arcane has a REST API documented with OpenAPI 3.1.
No. The project says it will always be free and releases it under the BSD-3-Clause license. There are no paid tiers.
Yes. A central manager controls remote hosts through an agent. In Direct mode the agent listens on port 3553, and Edge mode needs no inbound port.
No. Arcane focuses on Docker and Compose, and since v2.17.0 it also supports Podman. Reviewers recommend Portainer if you need Kubernetes.
Local login, OIDC with group-to-role mapping, passkeys, MFA and role-based access control.
Arcane needs access to the Docker socket, which gives it root-equivalent control of the host. Reviewers advise running it behind a socket proxy and a TLS reverse proxy, and changing the default credentials at first login.
Similar Tools
See all alternativesAmazon CloudFront is the AWS content delivery network. It caches and serves websites, APIs and media from more than 750 edge locations, and includes DDoS protection, WAF and edge compute.

Amazon's public cloud platform, with over 200 pay-as-you-go services for compute, storage, databases, networking and AI, used by startups through large enterprises and governments.
Amazon S3 is AWS's pay-as-you-go object storage service. Businesses use it to store files, backups, data lakes and static website assets at almost any scale.
Ranked near Arcane in Hosting & Infrastructure
See Arcane in the listArcane is #288 in Hosting & Infrastructure by our score.





