Komodo vs Drydock
Komodo is a broad DevOps platform with CI/CD, GitOps, and container management. Drydock focuses specifically on safe container update monitoring with rollback, maintenance windows, security scanning, and the widest registry and notification coverage.
Feature Comparison
A side-by-side look at what each tool offers.
| Feature | Komodo | Drydock |
|---|---|---|
| Project status | Actively maintained | Actively maintained |
| Language | Rust + TypeScript | TypeScript |
| Web UI | Yes | Yes |
| Image update detection | Yes | Yes |
| Auto-update containers | Yes | Yes (monitor-first) |
| Automatic rollback | No | Yes, on health check failure |
| Maintenance windows | No | Yes |
| Lifecycle hooks (pre/post) | No | Yes, with timeout & abort |
| Image backup | No | Pre-update backup with retention |
| Security scanning (Trivy) | No | Trivy + SBOM + cosign verification |
| Registry providers | Limited | 23 dedicated integrations |
| Notification services | Slack, Discord, webhooks | 20 native trigger integrations |
| MQTT / Home Assistant | No | Yes |
| OIDC / SSO | Yes | Yes (Authelia, Auth0, Authentik) |
| Passkey / TOTP 2FA | Yes | Planned |
| CI/CD pipelines | Yes | No (webhook API for CI/CD) |
| TypeScript scripting | Yes (Actions) | Planned |
| TOML GitOps config | Yes | Planned (YAML) |
| CLI tool | Yes | Planned |
| Prometheus metrics | No | Full /metrics endpoint + Grafana template |
| Audit log | No | Yes, with REST API |
| Dry-run preview | No | Yes |
| License | GPL-3.0 | AGPL-3.0 |
Key Differentiators
Where Drydock goes beyond what Komodo offers.
Update Safety Controls
Drydock is the only tool with automatic rollback on health check failure, maintenance windows, and pre/post-update lifecycle hooks. Komodo can update containers but lacks these safety primitives.
Security Scanning
Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), and cosign image signature verification — built-in. Komodo has no integrated security scanning.
Dry-Run Preview
Preview exactly what an update will do before applying it, with pre-update image backups and configurable retention. Komodo applies updates immediately with no preview step.
23 Registry Providers
Dedicated integrations for Docker Hub, GHCR, ECR, GCR, GAR, GitLab, Quay, Harbor, Artifactory, Nexus, and more. Komodo supports fewer registries out of the box.
20 Notification Services
Slack, Discord, Telegram, Teams, Matrix, SMTP, MQTT, Kafka, Gotify, NTFY, and more. Komodo's notification options are more limited.
Fully Open Source
Every Drydock feature is free and open source. Both Drydock (AGPL-3.0) and Komodo (GPL-3.0) use copyleft licenses.
Considering Komodo?
Komodo and Drydock serve different needs. If you want safe, monitored container updates with rollback and security scanning, Drydock is purpose-built for that. One Docker command to get started.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
codeswhat/drydockReady to try Drydock?
Open source, AGPL-3.0 licensed, and actively maintained.