{
 "slug": "uptime-kuma",
 "name": "Uptime Kuma",
 "tagline": "Uptime monitoring with status pages and multi-channel alerting",
 "category": "observability",
 "use_cases": [
  "uptime-monitoring",
  "status-pages",
  "alerting"
 ],
 "aliases": [],
 "status": "live",
 "upstream": {
  "vendor": "Louis Lam",
  "url": "https://uptime.kuma.pet/",
  "license": "MIT",
  "license_url": "https://github.com/louislam/uptime-kuma/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "2.5.7",
   "last_build": "2026-10-23",
   "entity_id": "prod-4spbq5atzftqm",
   "ami_alias": "/aws/service/marketplace/prod-4spbq5atzftqm/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-p6kk6ziqfkggu",
   "recommended_instance_type": "t3.small",
   "price_usd_per_hour": 0.03,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "2.5.5",
   "last_build": "2026-09-17",
   "offer_id": "uptime-kuma",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:uptime-kuma:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.uptime-kuma?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/uptime-kuma/",
  "json": "https://lynxroute.com/products/uptime-kuma/product.json"
 },
 "release_notes": [
  {
   "version": "2.5.7",
   "title": "Uptime Kuma 2.5.7",
   "notes": "* Uptime Kuma updated 2.5.5 -> 2.5.7, bugfix releases with no database migration. MIT unchanged\n* Dependency security updates; fixes the average-response badge and TCP-with-TLS monitor retries\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23"
   }
  },
  {
   "version": "2.5.5",
   "title": "Uptime Kuma 2.5.5",
   "notes": "* Uptime Kuma 2.5.5, upgraded from 2.5.4. Fixes a memory leak in the TCP monitor, where connections were not fully released after each check\n* Bundled third-party dependencies refreshed to their latest patch releases\n* Includes 2.5.4: an SFTP monitor type with password or private-key authentication, the Signalgrid, Notify! and Amoot SMS notification providers, and jsonata 2.2.2 (CVE-2026-77415)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-17",
    "azure": "2026-09-17"
   }
  },
  {
   "version": "2.5.4",
   "title": "Uptime Kuma 2.5.4",
   "notes": "* Uptime Kuma 2.5.4, upgraded from 2.5.3. Adds an SFTP monitor type with password or private-key authentication, and the Signalgrid, Notify! and Amoot SMS notification providers\n* Security updates: jsonata upgraded to 2.2.2 (CVE-2026-77415) and a denial-of-service weakness fixed\n* Fixes the swapped ping timeout limits in the monitor form, custom accepted status code ranges, and browser context cleanup for Real Browser monitors\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-15"
   }
  },
  {
   "version": "2.5.3",
   "title": "Uptime Kuma 2.5.3",
   "notes": "* Uptime Kuma 2.5.3 on Ubuntu 24.04 LTS - patch update from 2.5.0. MIT unchanged\n* Adds the SMS Gateway, ClickUp, TurboSMTP, BearSMS, Pinglet, Milky and openwa notification providers\n* Fixes the non-Docker installation path, which 2.5.1 had broken, and corrects the version number the build reports\n* Fixes a stale enum check on analytics_type after the SQLite column changed to a string, and treats a RADIUS Access-Challenge as a successful response\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-08-23",
    "azure": "2026-09-06"
   }
  },
  {
   "version": "2.4.0",
   "title": "Uptime Kuma 2.4.0",
   "notes": "* Uptime Kuma 2.4.0 (single Node.js app, MIT) on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* No admin baked into the image - the first signup through the setup wizard becomes the owner\n* Embedded SQLite pre-selected so the setup wizard skips straight to admin creation\n* Application bound to 127.0.0.1:3001; nginx terminates TLS on 443; HTTP redirects to HTTPS\n* certbot and the nginx plugin pre-installed for one-command Let's Encrypt TLS\n* UFW firewall pre-configured (ports 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-06-15",
    "azure": "2026-06-30"
   }
  }
 ],
 "release_history": [
  {
   "version": "2.5.7",
   "aws": "2026-10-23"
  },
  {
   "version": "2.5.5",
   "aws": "2026-09-17",
   "azure": "2026-09-17"
  },
  {
   "version": "2.5.4",
   "aws": "2026-09-15"
  },
  {
   "version": "2.5.3",
   "aws": "2026-08-23",
   "azure": "2026-09-06"
  },
  {
   "version": "2.5.0",
   "aws": "2026-08-17",
   "azure": "2026-08-18"
  },
  {
   "version": "2.4.0",
   "aws": "2026-06-15",
   "azure": "2026-06-30"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-4spbq5atzftqm/latest \\\n  --instance-type t3.small --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer uptime-kuma --plan payg-gen2\naz vm create -g my-rg -n uptime-kuma --size Standard_D2s_v3 \\\n  --image lynxroute:uptime-kuma:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Uptime Kuma is a self-hosted uptime and status monitoring tool, shipped as a single Node.js application backed by an embedded SQLite database - a self-hosted alternative to UptimeRobot, Pingdom, and StatusPage that keeps your monitoring data inside your own AWS account. It checks endpoints on a schedule using many monitor types (HTTP and HTTPS, keyword and JSON-query, TCP port, ping, DNS, gRPC, Docker container, and push), records response-time history and uptime percentages, and watches TLS certificate expiry. It raises alerts through 90+ notification integrations including Slack, Telegram, Discord, email/SMTP, webhooks, and PagerDuty, and publishes branded public status pages with incident history and maintenance windows. The web dashboard supports multiple users and is fully MIT licensed - no per-monitor fees, no seat limits, and no vendor lock-in.",
  "image_adds": "Security hardening:\n* No admin account baked into the image - the first signup through the one-time setup wizard becomes the owner; there is no default password\n* Application bound to 127.0.0.1 only; nginx terminates TLS on 443 and reverse-proxies to it; HTTP redirects to HTTPS\n* certbot and the nginx plugin pre-installed - enable a Let's Encrypt certificate with one command\n* SQLite state stored under a dedicated data directory with restricted permissions\n* UFW firewall - ports 80 and 443 only; SSH on 22\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, Kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md\n\nUptime Kuma is an open-source project by Louis Lam. This is an independently packaged, hardened distribution and is not affiliated with or endorsed by the Uptime Kuma project."
 },
 "generated_at": "2026-10-31T09:36:34Z"
}