Komodo vs Drydock
Komodo is a broad DevOps platform with CI/CD, GitOps, and container management. Drydock focuses specifically on safe container update monitoring with rollback, maintenance windows, security scanning, and 23 registry integrations plus 20 notification services.
Feature Comparison
Here's how we compare on the features that matter most.
| Feature | Komodo | Drydock |
|---|---|---|
| Project status | Actively maintained | Actively maintained |
| Language | Rust + TypeScript | TypeScript |
| Web UI | Yes | Yes |
| Image update detection | Yes | Yes |
| Auto-update containers | Yes | Yes (monitor-first) |
| Automatic rollback | No | Yes, on health check failure |
| Maintenance windows | No | Yes |
| Lifecycle hooks (pre/post) | No | Yes, with timeout & abort |
| Image backup | No | Pre-update backup with retention |
| Security scanning (Trivy) | No | Trivy + SBOM + cosign verification |
| Registry providers | Limited | 23 dedicated integrations |
| Notification services | Slack, Discord, Ntfy, Pushover | 20 native trigger integrations |
| MQTT / Home Assistant | No | Yes |
| OIDC / SSO | Yes | Yes (Authelia, Auth0, Authentik) |
| Passkey / TOTP 2FA | Yes | Planned |
| CI/CD pipelines | Yes | No (webhook API for CI/CD) |
| TypeScript scripting | Yes (Actions) | Planned |
| TOML GitOps config | Yes | Planned (YAML) |
| CLI tool | Yes | Planned |
| Prometheus metrics | No | Full /metrics endpoint + Grafana template |
| Audit log | Yes | Yes, with REST API |
| Dry-run preview | No | Yes |
| License | GPL-3.0 | AGPL-3.0 |
Key Differentiators
What we built that Komodo doesn't cover.
Update Safety Controls
Drydock is the only tool with automatic rollback on health check failure, maintenance windows, and pre/post-update lifecycle hooks. Komodo updates containers but does not include automatic rollback on failure, maintenance windows, or pre/post-update hooks.
Security Scanning
Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign image signature verification — built-in. Komodo has no integrated security scanning.
Dry-Run Preview
Preview exactly what an update will do before applying it, with pre-update image backups and configurable retention. Komodo applies updates immediately with no preview step.
23 Registry Providers
Dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more. Komodo supports fewer registries out of the box.
20 Trigger Integrations
Slack, Discord, Telegram, Teams, Matrix, SMTP, MQTT, Kafka, Gotify, NTFY, and more. Komodo includes built-in alerters for Slack, Discord, Ntfy, and Pushover; anything beyond those requires a self-hosted custom alerter integration.
Fully Open Source
Every Drydock feature is free and open source. Both Drydock (AGPL-3.0) and Komodo (GPL-3.0) use copyleft licenses.
Considering Komodo?
Komodo and Drydock serve different needs. If you want safe, monitored container updates with rollback and security scanning, Drydock is purpose-built for that. One Docker command to get started.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
-e DD_ANONYMOUS_AUTH_CONFIRM=true \
codeswhat/drydock # open dashboard — add real auth before exposing thisReady to try Drydock?
No SaaS subscription, no data sent off your host, and we ship updates fast.