Catalog / AI & LLM

Langflow

Visual builder for LLM workflows and agents

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

AWS Marketplace1.13.0↗ Azure Marketplace1.12.4↗

Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	1.13.0	$0.05/hr Recommended instance: t3.medium · 5-day free trial	2026-10-24	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	1.12.4	$0.028/vCPU/hr Recommended VM: Standard_D2s_v3	2026-10-03	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	MIT
Upstream	Langflow-AI
Machine-readable	product.json · catalog.json

What is Langflow

Langflow is a visual drag-and-drop builder for LLM-powered applications - a Python (FastAPI) and TypeScript (React) stack that lets developers compose chains, agents, and retrieval-augmented generation (RAG) pipelines from pre-built components on a canvas, then deploy them as REST endpoints. It integrates with 100+ LLM providers and vector stores (OpenAI, Anthropic, AWS Bedrock, Azure OpenAI, Ollama, Qdrant, Chroma, Pinecone) through the underlying LangChain abstractions, plus tool nodes for web search, SQL and file I/O. Persists flows, conversations and configuration in PostgreSQL. MIT license - lock-in-free alternative to LangSmith and other proprietary visual AI builders, with full Python source for every component.

What the Lynxroute image adds

Security hardening:

Authentication enabled - LANGFLOW_AUTO_LOGIN=False
Admin password equals EC2 Instance ID
Nginx reverse proxy with TLS - Langflow bound to localhost only
UFW firewall - ports 22, 80, 443 only
fail2ban, AppArmor

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/langflow-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-xjugaa3tgntqq/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer langflow --plan payg-gen2
az vm create -g my-rg -n langflow --size Standard_D2s_v3 \
  --image lynxroute:langflow:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Langflow 1.13.0

AWS · 2026-10-24

Langflow updated 1.12.4 -> 1.13.0, a feature release. MIT unchanged; secure defaults retained (auto-login disabled, telemetry off)
Triggers: schedule, inbound webhook, Slack, Microsoft and Google event triggers start flows with retries and dead-lettering
Managed connections with delegated OAuth for Google Workspace, Microsoft and Slack bundles, plus team and user administration API and CLI
Local knowledge bases move from Chroma to SQLite; new CLI tools convert SQLite to PostgreSQL and check instance integrity, with a guided migration page for superusers
Application audit log for flows and projects, GDPR data-subject erase, case-insensitive usernames and multi-user editing safety
Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates