Catalog / Vector databases

Qdrant

Vector database and similarity search engine for RAG and semantic search

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
1.20.0$0.05/hr
Recommended instance: t3.medium · 5-day free trial
2026-10-23Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
1.19.1$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-09-09Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseApache-2.0
UpstreamQdrant
Machine-readableproduct.json · catalog.json
What is Qdrant

Qdrant is a high-performance vector similarity search engine and database written in Rust - it stores embedding vectors with structured payloads, then serves approximate-nearest-neighbour (ANN) queries with optional payload filtering, hybrid sparse + dense search, multivector indexes and quantization. The server exposes REST and gRPC APIs and ships with a built-in web UI for collection browsing, point inspection and query playground. Operators get HNSW indexing, on-disk vector storage with configurable RAM caching, snapshots for backup, and a managed embedding pipeline through fastembed. Integrates natively with LangChain, LlamaIndex, Haystack and any OpenAI-compatible client. Apache-2.0 license - lock-in-free alternative to Pinecone, Weaviate and other proprietary vector services, with full Rust source for every component.

What the Lynxroute image adds

Security hardening:

  • Unique API key generated per instance at first boot
  • UFW firewall - ports 22, 6333, 6334 only
  • fail2ban, AppArmor

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Deploy

Launch in one command

Credentials are generated at first boot and written to /root/qdrant-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-otgb3m7ijnhok/latest \
  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer qdrant --plan payg-gen2
az vm create -g my-rg -n qdrant --size Standard_D2s_v3 \
  --image lynxroute:qdrant:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Qdrant 1.20.0

AWS · 2026-10-23
  • Qdrant updated 1.19.1 -> 1.20.0. Apache-2.0 unchanged; no breaking changes for single-node deployments
  • New: BM25 scoring on the full-text index, TurboQuant turbo8/turbo16 vector datatypes, nested per-element payload indexes, a code tokenizer and substring filtering
  • Security: vector names containing path traversal are rejected, read-only API keys are refused on internal gRPC, and rustls-webpki is updated (RUSTSEC-2026-0382, RUSTSEC-2026-0383)
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build