Catalog / Observability & monitoring

Uptime Kuma

Uptime monitoring with status pages and multi-channel alerting

CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside

Availability and pricing
CloudVersionSoftware priceLast build
AWS Marketplace
EC2 AMI · all commercial regions
2.5.7$0.03/hr
Recommended instance: t3.small · 5-day free trial
2026-10-23Listing ↗
Azure Marketplace
VM image · plan payg-gen2 · Gen2
2.5.5$0.028/vCPU/hr
Recommended VM: Standard_D2s_v3
2026-09-17Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts
Base OSUbuntu 24.04 LTS
HardeningCIS Level 1, Ubuntu 24.04 LTS (tailored)
LicenseMIT
UpstreamLouis Lam
Machine-readableproduct.json · catalog.json
What is Uptime Kuma

Uptime Kuma is a self-hosted uptime and status monitoring tool, shipped as a single Node.js application backed by an embedded SQLite database - a self-hosted alternative to UptimeRobot, Pingdom, and StatusPage that keeps your monitoring data inside your own AWS account. It checks endpoints on a schedule using many monitor types (HTTP and HTTPS, keyword and JSON-query, TCP port, ping, DNS, gRPC, Docker container, and push), records response-time history and uptime percentages, and watches TLS certificate expiry. It raises alerts through 90+ notification integrations including Slack, Telegram, Discord, email/SMTP, webhooks, and PagerDuty, and publishes branded public status pages with incident history and maintenance windows. The web dashboard supports multiple users and is fully MIT licensed - no per-monitor fees, no seat limits, and no vendor lock-in.

What the Lynxroute image adds

Security hardening:

  • No admin account baked into the image - the first signup through the one-time setup wizard becomes the owner; there is no default password
  • Application bound to 127.0.0.1 only; nginx terminates TLS on 443 and reverse-proxies to it; HTTP redirects to HTTPS
  • certbot and the nginx plugin pre-installed - enable a Let's Encrypt certificate with one command
  • SQLite state stored under a dedicated data directory with restricted permissions
  • UFW firewall - ports 80 and 443 only; SSH on 22
  • fail2ban, AppArmor
  • CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

  • CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
  • auditd, SSH hardening, Kernel hardening, IMDSv2 enforced

Compliance artifacts:

  • SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
  • CIS Conformance Report at /etc/lynxroute/cis-report.html
  • CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Uptime Kuma is an open-source project by Louis Lam. This is an independently packaged, hardened distribution and is not affiliated with or endorsed by the Uptime Kuma project.

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/uptime-kuma-credentials.txt.

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-4spbq5atzftqm/latest \
  --instance-type t3.small --key-name my-key --security-group-ids sg-xxxxxxxx
# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer uptime-kuma --plan payg-gen2
az vm create -g my-rg -n uptime-kuma --size Standard_D2s_v3 \
  --image lynxroute:uptime-kuma:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Uptime Kuma 2.5.7

AWS · 2026-10-23
  • Uptime Kuma updated 2.5.5 -> 2.5.7, bugfix releases with no database migration. MIT unchanged
  • Dependency security updates; fixes the average-response badge and TCP-with-TLS monitor retries
  • Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build