{
 "slug": "glitchtip",
 "name": "GlitchTip",
 "tagline": "Error tracking and uptime monitoring compatible with the Sentry SDKs",
 "category": "observability",
 "use_cases": [
  "error-tracking",
  "sentry-compatible",
  "uptime-monitoring"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "GlitchTip",
  "url": "https://glitchtip.com",
  "license": "MIT",
  "license_url": "https://gitlab.com/glitchtip/glitchtip-backend/-/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "restricted",
   "restricted_on": "2026-08-24"
  },
  "azure": {
   "status": "live",
   "version": "6.2.6",
   "last_build": "2026-08-21",
   "offer_id": "glitchtip",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:glitchtip:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.glitchtip?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/glitchtip/",
  "json": "https://lynxroute.com/products/glitchtip/product.json"
 },
 "release_notes": [
  {
   "version": "6.2.6",
   "title": "GlitchTip 6.2.6",
   "notes": "* GlitchTip 6.2.6 on Ubuntu 24.04 LTS - patch update from 6.2.2 on the 6.2 line\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Error tracking, structured log ingest and uptime monitoring in one instance; applications report through the widely used open-source client libraries\n* Bundled PostgreSQL 18 and Valkey 9 - no external managed database or cache required\n* Signing key and database password generated at first launch into /root/glitchtip-credentials.txt; nothing is baked into the image\n* Sign-up closed by default - the first visitor claims the administrator account, and every later attempt is refused automatically\n* Nginx TLS on 443 with a per-instance certificate; Certbot pre-installed for a CA-signed one\n* PostgreSQL and Valkey are reachable only by the application and publish no host port\n* Container log rotation capped so a restarting container cannot fill the root volume\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "azure": "2026-08-21"
   }
  },
  {
   "version": "6.2.2",
   "title": "GlitchTip 6.2.2 - Initial release (July 2026)",
   "notes": "* GlitchTip 6.2.2 on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Error tracking, structured log ingest and uptime monitoring in one instance; applications report through the widely used open-source client libraries\n* Bundled PostgreSQL 18 and Valkey 9 - no external managed database or cache required\n* Signing key and database password generated at first launch into /root/glitchtip-credentials.txt; nothing is baked into the image\n* Sign-up closed by default - the first visitor claims the administrator account, and every later attempt is refused automatically\n* Nginx TLS on 443 with a per-instance certificate; Certbot pre-installed for a CA-signed one\n* PostgreSQL and Valkey are reachable only by the application and publish no host port\n* Container log rotation capped so a restarting container cannot fill the root volume\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-git",
   "live": {
    "azure": "2026-07-31"
   }
  }
 ],
 "release_history": [
  {
   "version": "6.2.6",
   "azure": "2026-08-21"
  },
  {
   "version": "6.2.2",
   "azure": "2026-07-31"
  }
 ],
 "deploy": {
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer glitchtip --plan payg-gen2\naz vm create -g my-rg -n glitchtip --size Standard_D2s_v3 \\\n  --image lynxroute:glitchtip:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "GlitchTip is an open-source error tracking and application monitoring platform, built as a Django application served by the Granian ASGI server. Applications report exceptions to it through the widely used open-source client libraries, so instrumenting one usually means installing a package and setting a single DSN environment variable. Similar events are grouped into issues carrying a stack trace, breadcrumbs, request context and release information, so you see one problem with an occurrence count instead of thousands of duplicate alerts. Alongside errors it ingests structured logs and runs scheduled uptime monitors against your endpoints. Issues can be assigned, commented on and resolved; alerts are delivered by email or webhook. Organizations, projects, issues and events persist in a bundled PostgreSQL 18 database, with a bundled Valkey 9 cache. GlitchTip is an independent project under the MIT license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Signing key and database password generated at first launch into /root/glitchtip-credentials.txt - nothing is baked into the image, so no two instances share a secret\n* Sign-up closed by default - the first visitor claims the administrator account, and every later attempt is refused automatically\n* nginx terminates TLS on 443 with a per-instance certificate generated at first launch; Certbot and its nginx plugin are pre-installed for a CA-signed one\n* PostgreSQL 18 and Valkey 9 bound inside the application network only - both are unreachable from outside the instance and publish no host port\n* Per-project ingest keys, and a duplicate event is rejected rather than counted twice\n* Debug mode and the test API disabled - the shipped configuration is the production one\n* Container log rotation capped so a restarting container cannot fill the root volume\n* External purchase and donation prompts removed from the bundled web interface; product documentation links are kept\n* UFW firewall pre-configured - only 22, 80 and 443 open; the application port, database and cache are blocked\n* fail2ban SSH brute-force protection, AppArmor mandatory access control\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}