{
 "slug": "netdata",
 "name": "Netdata",
 "tagline": "Real-time per-second infrastructure monitoring with anomaly detection",
 "category": "observability",
 "use_cases": [
  "real-time-monitoring",
  "anomaly-detection",
  "host-metrics"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Netdata Inc.",
  "url": "https://www.netdata.cloud/",
  "license": "GPL-3.0-or-later",
  "license_url": "https://github.com/netdata/netdata/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "2.12.2",
   "last_build": "2026-10-25",
   "entity_id": "prod-7sb5qc7wekt4y",
   "ami_alias": "/aws/service/marketplace/prod-7sb5qc7wekt4y/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-dfkz5ds6zprvs",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "2.12.0",
   "last_build": "2026-10-02",
   "offer_id": "netdata",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:netdata:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.netdata?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/netdata/",
  "json": "https://lynxroute.com/products/netdata/product.json"
 },
 "release_notes": [
  {
   "version": "2.12.2",
   "title": "Netdata 2.12.2",
   "notes": "* Netdata updated 2.12.1 -> 2.12.2, a patch release. GPL-3.0 unchanged\n* Security: stricter SNMPv3 authentication in the SNMP traps receiver; Function and dynamic configuration requests now require strict JSON\n* Fixes obsolete charts kept alive by alert evaluation, long-range queries across storage tiers, and Cloud reconnect backoff\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-25"
   }
  },
  {
   "version": "2.12.1",
   "title": "Netdata 2.12.1",
   "notes": "* Netdata updated 2.12.0 -> 2.12.1, a patch release. GPL-3.0 unchanged\n* Fixes eBPF collector crashes and reduces Docker collector load\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23"
   }
  },
  {
   "version": "2.12.0",
   "title": "Netdata 2.12.0",
   "notes": "* Netdata Agent updated 2.11.1 -> 2.12.0, a minor release. GPL-3.0-or-later unchanged\n* OpenTelemetry trace ingestion (early access) joins metrics and logs, alongside new Redfish out-of-band hardware, S3 object storage and SMBIOS memory collectors\n* Security hardening: go.d file and command secrets are resolved without elevated privileges, and secret references in auto-discovered jobs are no longer resolved by default\n* Query engine correctness fixes and database engine stability fixes, including a use-after-free on reentrant dictionary deletes\n* Changed behaviour: go.d dynamic configuration may answer 202 for changes that are still starting, and the Ceph collector replaced one chart context and caps per-OSD and per-pool charts at 100 by default\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-02"
   }
  },
  {
   "version": "2.11.1",
   "title": "Netdata 2.11.1",
   "notes": "* Netdata Agent updated 2.11.0 -> 2.11.1, a patch release. GPL-3.0-or-later unchanged\n* Query engine correctness: exact SUM values across storage-tier boundaries, and API timestamps consistent across Agents\n* Database engine stability: fixed a use-after-free, a double free and a counter leak that could stall shutdown or datafile rotation; bundled SQLite updated to 3.53.4\n* The go.d UPS collector no longer writes the PASSWORD credential to the log on connection errors\n* Lighter health engine: alerts indexed by name per host and no repeated re-evaluation when chart metadata is unchanged\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-17",
    "azure": "2026-09-17"
   }
  },
  {
   "version": "2.11.0",
   "title": "Netdata v2.11.0",
   "notes": "* Re-release of Netdata 2.11.0. The application version is unchanged; this build refreshes the underlying operating system image\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-03",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "2.10.4",
   "title": "Netdata 2.10.4 - Patch update (July 2026)",
   "notes": "* Netdata Agent 2.10.4 on Ubuntu 24.04 LTS\n* Database-engine hardening against corrupted data\n* Streaming/replication memory-leak and error-handling fixes\n* Cloud-connectivity CPU-spin fix\n* API endpoint security tightening\n* Memory-safety audit fixes\n* Netdata Agent (GPL-3.0) and bundled web dashboard UI (NCUL1) unchanged\n* All hardening unchanged from the prior release\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-07-20",
    "azure": "2026-07-20"
   }
  },
  {
   "version": "2.10.3",
   "title": "Netdata 2.10.3 - Initial release (June 2026)",
   "notes": "* Netdata Agent 2.10.3 on Ubuntu 24.04 LTS\n* Netdata Agent (GPL-3.0) installed from the official Netdata stable package repository; bundled web dashboard UI under NCUL1, shipped unmodified\n* Dashboard and API (19999) bound to localhost only - Nginx is the only exposed door\n* Unique Basic Auth password generated at first launch for the Nginx TLS perimeter on 443\n* Shipped cloud-disconnected (not claimed to Netdata Cloud); anonymous telemetry disabled; local registry turned off\n* Netdata runs as a non-root service with a restricted systemd unit\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* UFW firewall pre-configured (ports 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-22",
    "azure": "2026-06-30"
   }
  }
 ],
 "release_history": [
  {
   "version": "2.12.2",
   "aws": "2026-10-25"
  },
  {
   "version": "2.12.1",
   "aws": "2026-10-23"
  },
  {
   "version": "2.12.0",
   "aws": "2026-10-02",
   "azure": "2026-10-02"
  },
  {
   "version": "2.11.1",
   "aws": "2026-09-17",
   "azure": "2026-09-17"
  },
  {
   "version": "2.11.0",
   "aws": "2026-09-03",
   "azure": "2026-08-19"
  },
  {
   "version": "2.10.4",
   "aws": "2026-07-20",
   "azure": "2026-07-20"
  },
  {
   "version": "2.10.3",
   "aws": "2026-06-22",
   "azure": "2026-06-30"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-7sb5qc7wekt4y/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer netdata --plan payg-gen2\naz vm create -g my-rg -n netdata --size Standard_D2s_v3 \\\n  --image lynxroute:netdata:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Netdata is a real-time, high-resolution infrastructure monitoring system. The agent auto-discovers and collects thousands of system and application metrics at per-second granularity (CPU, memory, disks, network, processes, containers, web servers, databases and more), stores them in its embedded time-series database, runs unsupervised machine-learning anomaly detection, evaluates health alerts, and serves an interactive live dashboard. It needs no external time-series database or separate query layer to monitor a single host out of the box. This image runs Netdata single-node and standalone: it is shipped cloud-disconnected (it is not claimed to Netdata Cloud) and anonymous telemetry is disabled, so all metrics stay inside your AWS account. The Netdata Agent is GPL-3.0; running it yourself means no vendor lock-in.",
  "image_adds": "Security hardening:\n* A unique Basic Auth password generated at first launch for the Nginx perimeter (the Netdata dashboard has no authentication of its own)\n* Nginx reverse proxy with TLS - the dashboard proxied on port 443\n* The Netdata dashboard and API (19999) bound to localhost only - Nginx is the only exposed door\n* Anonymous telemetry disabled and the local registry turned off (no phone-home)\n* Shipped cloud-disconnected - the agent is not claimed to Netdata Cloud\n* Netdata runs as a non-root service with a restricted systemd unit\n* UFW firewall - ports 22, 80, 443 only\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md\n\nLICENSING\n\nThe Netdata Agent (metric collection, storage, ML, alerting and APIs) is licensed GPL-3.0. The bundled web dashboard user interface is provided under the Netdata Cloud UI License v1 (NCUL1), which permits free use and redistribution bundled with the agent; it is shipped unmodified."
 },
 "generated_at": "2026-10-31T09:36:34Z"
}