Dockhand

Dockhand is a self-hosted web UI for Docker. It runs as a container and stores its data in SQLite by default, or in PostgreSQL if you prefer. From the UI you can start, stop and edit containers, including CPU, memory and restart policy, open a web terminal and browse files inside containers. It also includes a visual Docker Compose editor and can deploy stacks from templates or Git repositories, with webhooks and cron-scheduled syncs. To manage several hosts, it connects through the local socket, through remote TCP with TLS, or through its Hawser agent, which reaches hosts behind NAT without opening inbound ports. Security features include image scanning with Grype or Trivy, update blocking based on vulnerability severity, OIDC SSO, TOTP MFA and passkeys. It also integrates with external secret managers such as 1Password, HashiCorp Vault and Bitwarden. For monitoring and alerts it offers a Prometheus metrics endpoint, notifications through Apprise and restic-based backups, which are still in beta. Pricing is per host per year: a free edition, SMB at $499 and Enterprise at $1,499, with volume discounts from five hosts. The software is source-available under BSL 1.1, so production use by a business needs a paid license, and RBAC, LDAP/AD and audit logging come only with Enterprise. It suits developers and IT teams running Docker on their own servers. It is not a hosting provider and supplies no compute. The project is young, dating from late 2025, and it has no Swarm or Kubernetes management.