Your Docker fleet,
watched and run
from one console.
doco-pilot is a hosted control plane for managing and monitoring Docker containers across every VPS you run. Drop a lightweight agent on each host, and get live containers, images, metrics, and alerts in one place — without ever opening the Docker socket to the internet.
Everything you'd SSH in for — without the SSH.
Every feature below is live in the product today, not on a roadmap slide.
Full container control
List, inspect, start, stop, pause, restart, remove, and create containers, with live streaming logs — from any host.
Unlimited multi-server
Register every VPS you run. Each one gets its own generated agent install command and encrypted credentials.
Live + historical metrics
Per-container CPU, memory, and network, plus host-level stats sampled continuously and kept as time-series history.
Images, volumes & networks
Pull, remove, and prune images with dangling cleanup. Inspect and manage volumes and networks alongside a full disk-usage breakdown.
Live event feed
Watch the Docker event stream as it happens on every host, with full history persisted for when you need to look back.
Threshold alerts
Get an outbound webhook the moment a container crashes or CPU spikes, with cooldowns and a full alert history per server.
Three steps, one direction of traffic.
The agent always calls home — your host never accepts an inbound connection, and your Docker socket never leaves the machine.
Register a server
Add a host in the console. doco-pilot generates a unique agent key pair, hashed and encrypted at rest.
Run the agent
Paste the generated command on your VPS. It mounts the Docker socket locally and opens an outbound WebSocket only.
docker run -d --name doco-agent \
-v /var/run/docker.sock:/var/run/docker.sock \
-e AGENT_KEY=... doco-pilot/agentManage from the browser
The server relays your actions to the agent and streams back state, logs, and metrics in real time.
Security is the actual feature.
Nothing about your Docker socket ever touches the public internet.
The agent is the only thing that talks to Docker, and it always initiates the connection outward. Your credentials are encrypted before they're stored, and every handshake is signed — so even the relay can't impersonate an agent.
- ✓AES-256-GCM encrypted agent credentials, bcrypt-hashed keys
- ✓HMAC-signed agent handshake over TLS-verified WebSocket
- ✓JWT sessions bound to IP, with rotating refresh tokens
- ✓Zod-validated input on every request, locked-down CORS
- ✓Server-side audit trail of every action taken
Where doco-pilot fits.
We're a fleet monitoring & management console, the same job as Portainer — not a deploy platform like Coolify or Dokploy. We won't pretend to do their job.
| Capability | doco-pilot | Portainer | Coolify / Dokploy |
|---|---|---|---|
| No inbound port on managed host | ✓ dial-out agent | ✓ Edge tunnel | SSH-based |
| Container start/stop/logs/inspect | ✓ | ✓ | ✓ |
| Live + historical metrics | ✓ | ✓ | ✓ |
| Threshold alerting | ✓ webhook | limited | ✓ multi-channel |
| Zero-install control plane | ✓ hosted for you | self-run | self-run |
| Docker Compose / stack deploy | — | ✓ | ✓ core job |
| Git-based deploy / CI | — | — | ✓ |
| doco-pilot doesn't build or deploy your apps — it manages and monitors what's already running. If you need Git-push deploys, Coolify or Dokploy is the right tool for that job. | |||
Free to start. Cheap to keep.
The Free plan is fully live today. Pro pricing is locked in at $5/mo, but billing hasn't launched yet — sign up free now and you'll be first in line when it does.
Free
- ✓Up to 2 servers
- ✓Solo use (no team sharing)
- ✓7 days of metrics, events & audit history
- ✓All core container/image/volume/network tools
Pro
- ✓Unlimited servers
- ✓Unlimited team members with RBAC
- ✓30 days of metrics, events & audit history
- ✓Everything in Free
Common questions.
What is doco-pilot?
doco-pilot is a hosted control plane for managing and monitoring Docker containers across every VPS you run — live containers, images, metrics, and alerts in one console.
How is doco-pilot different from Portainer?
doco-pilot and Portainer do the same core job — fleet monitoring and container management. The difference is how they connect: doco-pilot's agent always dials out from your VPS, so you never open an inbound port, and the console itself is hosted for you instead of something you run and maintain.
Is my Docker socket exposed to the internet?
No. The agent is the only thing that talks to your Docker socket, and it always initiates the connection outward over a TLS-verified, HMAC-signed WebSocket. Nothing about your Docker socket ever touches the public internet.
Does doco-pilot deploy or build my applications?
No. doco-pilot manages and monitors containers that are already running — it doesn't build images or handle Git-based deploys. If you need Git-push deploys, tools like Coolify or Dokploy are the right fit for that job.
How much does doco-pilot cost?
The Free plan covers up to 2 servers with 7 days of history and is fully live today, at $0. A Pro plan at $5/month with unlimited servers and team members is coming soon — sign up free now to be first in line.
Point it at your first server in under five minutes.
Free to run. Open source. No credit card, no Docker socket exposed to anyone but you.