{
 "slug": "neo4j",
 "name": "Neo4j",
 "tagline": "Native graph database with the Cypher query language",
 "category": "database",
 "use_cases": [
  "graph-database",
  "knowledge-graph",
  "cypher"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Neo4j, Inc.",
  "url": "https://neo4j.com",
  "license": "GPL-3.0-only",
  "license_url": "https://github.com/neo4j/neo4j/blob/HEAD/LICENSE.txt"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   7473,
   7687
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "2026.10.1",
   "last_build": "2026-10-24",
   "entity_id": "prod-7wsw2xhpk56k4",
   "ami_alias": "/aws/service/marketplace/prod-7wsw2xhpk56k4/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-uiefflygzi3uq",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "2026.09.0",
   "last_build": "2026-10-02",
   "offer_id": "neo4j",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:neo4j:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.neo4j?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/neo4j/",
  "json": "https://lynxroute.com/products/neo4j/product.json"
 },
 "release_notes": [
  {
   "version": "2026.10.1",
   "title": "Neo4j 2026.10.1",
   "notes": "* Neo4j Community Edition updated 2026.09.0 -> 2026.10.1, a CalVer minor release. GPL-3.0 unchanged\n* Cypher adds map addition with the + operator and better concurrency for CALL IN CONCURRENT TRANSACTIONS, with achieved concurrency shown in PROFILE\n* Security: bundled library updates fix several CVEs, including Jline 3.30.15 and Jetty 12.1.13\n* Fixes a regression when updating dense relationships during checkpoint and an arithmetic overflow returning a wrong result\n* Deprecates the db.index.fulltext.queryNodes and queryRelationships procedures in favour of the Cypher SEARCH clause\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-24"
   }
  },
  {
   "version": "2026.09.0",
   "title": "Neo4j 2026.09.0",
   "notes": "* Neo4j Community Edition updated 2026.08.1 -> 2026.09.0, a CalVer minor release. GPL-3.0 unchanged\n* Cypher adds native full-text search through a new SEARCH clause, map comprehensions, and toString() support for lists, maps, nodes, relationships and paths\n* Behaviour changes: the modulo operator now raises a division-by-zero error when the divisor is 0, and the page cache reserves its full configured size at startup\n* Bundled library refresh: Netty 4.2.18, Bouncy Castle 1.85, gRPC 1.84, Apache Shiro 3.0.1 and Logback 1.6.3\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-02"
   }
  },
  {
   "version": "2026.08.1",
   "title": "Neo4j 2026.08.1",
   "notes": "* Neo4j Community Edition updated 2026.07.1 -> 2026.08.1, a CalVer minor release. GPL-3.0 unchanged\n* Cypher adds a native UUID type with a uuid() constructor and helper functions, plus string interpolation literals that embed expressions directly inside a string\n* Cypher correctness fixes: null divided by zero now returns null per the GQL specification, and dynamic property targets no longer observe earlier assignments in the same SET clause\n* Security refresh of bundled libraries: Log4j 2.26.1 (CVE-2026-49844) and Apache Shiro 3.0.0, with the Neo4j Java driver at 6.2.1\n* Kernel fix for internal resource monitoring that could fail queries\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-11",
    "azure": "2026-09-13"
   }
  },
  {
   "version": "2026.07.1",
   "title": "Neo4j v2026.07.1",
   "notes": "* Re-release of Neo4j Community Edition 2026.07.1. The application version is unchanged; this build refreshes the underlying operating system image\n* Random admin password set at first launch - no default neo4j/neo4j credential\n* Native TLS retained: Bolt required on 7687 and the Neo4j Browser over HTTPS on 7473; plain HTTP 7474 stays bound to localhost\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "2026.07.1",
   "title": "Neo4j Community Edition 2026.07.1",
   "notes": "* Updated to Neo4j Community Edition 2026.07.1 (CalVer train, GPL-3.0) on OpenJDK 21\n* Upstream bundles netty 4.1.135.Final, clearing several CVEs carried by the previous build\n* Upstream fix: neo4j-admin import accepts Parquet files containing zero-row row groups\n* Random admin password set at first launch - no default neo4j/neo4j credential\n* Native TLS retained: Bolt required on 7687 and the Neo4j Browser over HTTPS on 7473; plain HTTP 7474 stays bound to localhost\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "2026.06.0",
   "title": "Neo4j Community Edition 2026.06.0",
   "notes": "* Updated to Neo4j Community Edition 2026.06.0 (CalVer train, GPL-3.0) on OpenJDK 21\n* Upstream bundles netty 4.1.135.Final, clearing several CVEs carried by the previous build\n* Upstream fix: neo4j-admin import accepts Parquet files containing zero-row row groups\n* Random admin password set at first launch - no default neo4j/neo4j credential\n* Native TLS retained: Bolt required on 7687 and the Neo4j Browser over HTTPS on 7473; plain HTTP 7474 stays bound to localhost\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-23",
    "azure": "2026-07-27"
   }
  },
  {
   "version": "2026.05.0",
   "title": "Neo4j Community Edition 2026.05.0 - Initial release (June 2026)",
   "notes": "* Neo4j Community Edition 2026.05.0 on Ubuntu 24.04 LTS (OpenJDK 21)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Random admin password set at first launch - no default neo4j/neo4j credential\n* Native TLS: Bolt on port 7687 (encryption required) and the Neo4j Browser over HTTPS on 7473 with a self-signed certificate (replaceable)\n* Plain HTTP 7474 bound to localhost and firewalled; JVM heap and page cache sized to the instance at first launch\n* Neo4j Browser at /browser/; Browser usage telemetry disabled\n* UFW firewall pre-configured (ports 7473, 7687 and SSH 22 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-15",
    "azure": "2026-06-25"
   }
  }
 ],
 "release_history": [
  {
   "version": "2026.10.1",
   "aws": "2026-10-24"
  },
  {
   "version": "2026.09.0",
   "aws": "2026-10-02",
   "azure": "2026-10-02"
  },
  {
   "version": "2026.08.1",
   "aws": "2026-09-11",
   "azure": "2026-09-13"
  },
  {
   "version": "2026.07.1",
   "aws": "2026-09-04",
   "azure": "2026-08-19"
  },
  {
   "version": "2026.06.0",
   "aws": "2026-07-23",
   "azure": "2026-07-27"
  },
  {
   "version": "2026.05.0",
   "aws": "2026-06-15",
   "azure": "2026-06-25"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-7wsw2xhpk56k4/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer neo4j --plan payg-gen2\naz vm create -g my-rg -n neo4j --size Standard_D2s_v3 \\\n  --image lynxroute:neo4j:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Neo4j Community Edition is an open-source native graph database written in Java that stores data as nodes and relationships instead of tables, making connected-data queries fast and expressive. It is queried with Cypher, Neo4j's declarative graph query language, over the binary Bolt protocol or an HTTP API, and ships with the Neo4j Browser - a built-in web workbench for running Cypher and visualizing the graph. The engine provides ACID transactions, index-free adjacency for constant-time traversals, native graph storage, schema constraints and indexes, and a procedure library. Typical uses include knowledge graphs, fraud detection, recommendation engines, network and IT operations mapping, and identity and access graphs. This image runs a single-node Community instance on OpenJDK 21, with the JVM heap and page cache sized to the instance at first launch. GPL-3.0 license, self-hosted entirely in your own AWS account - no vendor lock-in.",
  "image_adds": "Security hardening:\n* Random administrator password generated at first launch - no default neo4j/neo4j credential\n* Native TLS on the Bolt protocol (port 7687, encryption required) and the Neo4j Browser over HTTPS (port 7473), with a self-signed certificate generated at first launch (replaceable with your own CA certificate)\n* Plain HTTP (7474) bound to localhost and blocked by the firewall - only HTTPS 7473 and Bolt 7687 are exposed\n* JVM heap and page cache sized to the instance RAM at first launch\n* Neo4j Browser usage telemetry disabled\n* UFW firewall - only ports 7473, 7687 and SSH on 22 are open\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}