WUD vs Drydock
We forked What's Up Docker (WUD) and have evolved significantly since — migrating to TypeScript, adding security scanning, distributed agents, audit logging, rollback, and 10 additional registry providers.
Feature Comparison
Here's how we compare on the features that matter most.
| Feature | WUD | Drydock |
|---|---|---|
| Project status | Actively maintained | Actively maintained |
| Language | TypeScript | TypeScript (full ESM) |
| Web UI | Yes | Yes (redesigned) |
| Auto-update containers | Yes | Yes |
| Docker Compose updates | Yes | Yes, with multi-network support |
| Registry providers | 13 | 23 |
| Notifications | 16 triggers | 20 native trigger integrations |
| Security scanning | None | Trivy + SBOM + cosign verification |
| OIDC authentication | OIDC supported (Authelia, Auth0, Authentik) | Authelia, Auth0, Authentik |
| REST API | Yes | Yes (expanded) |
| Prometheus metrics | Yes | Yes + Grafana dashboard template |
| MQTT / Home Assistant | Yes | Yes |
| Image backup & rollback | None | Pre-update backup with retention + auto rollback |
| Container grouping | Yes | Yes (enhanced with batch actions) |
| Lifecycle hooks | None | Pre/post-update shell commands |
| Webhook API | None | Token-authenticated webhooks for CI/CD |
| Container actions | None | Start/stop/restart from UI/API |
| Distributed agents | Multi-host via Docker TCP API | SSE-based agents (no exposed Docker API required) |
| Audit log | None | Yes, with REST API & Prometheus counter |
| Semver-aware updates | Yes | Yes |
| Container log viewer | None | Yes, with level filtering & auto-fetch |
| Test framework | Jest | Vitest 4 |
| License | MIT | AGPL-3.0 |
Key Differentiators
What we built that WUD doesn't cover.
Fork & Evolve
We started as a WUD fork, then migrated to TypeScript, added security scanning, distributed agents, audit logging, and dozens of new features — taking WUD's foundation much further.
Security Scanning
Trivy vulnerability scanning, SBOM generation (CycloneDX & SPDX), cosign signature verification, and Update Bouncer to block vulnerable deploys — none of which WUD includes.
Distributed Agents
Monitor remote Docker hosts via lightweight SSE-based agents with a centralized dashboard — no need to expose the Docker API over TCP. WUD supports multiple Docker hosts too, but requires the remote Docker API to be exposed over TCP or TLS.
23 Registry Providers
10 more registries than WUD — including GAR, Harbor, Artifactory, Nexus, Alibaba Cloud, IBM Cloud, and Oracle Cloud.
Rollback & Backup
Pre-update image backups with configurable retention, dry-run preview, and automatic rollback on health check failure. None of these exist in WUD.
4 More Trigger Services
Google Chat, Matrix, Mattermost, and Microsoft Teams (Adaptive Cards) plus enhanced configuration for existing triggers.
Coming from WUD?
We're a direct WUD fork, so migration is straightforward. Your existing Docker socket mount works as-is. You'll get the same monitoring capabilities plus security scanning, agents, audit log, and a modernized UI.
$ docker run -d \
--name drydock \
-v /var/run/docker.sock:/var/run/docker.sock \
-p 3000:3000 \
-e DD_ANONYMOUS_AUTH_CONFIRM=true \
codeswhat/drydock # open dashboard — add real auth before exposing thisReady to try Drydock?
No SaaS subscription, no data sent off your host, and we ship updates fast.