Features

Ocelot-Cloud is offered in two editions.The Community Edition (CE) is designed to meet the needs of casual and small-scale users. The commercial features of the Premium Edition are for users who require more advanced functionality.

Business Philosophy

Safety is always free: Features required to run the platform safely are never paywalled.
CE is fully usable: The free edition supports real, long-term self-hosting.
Professional operation is premium: Paid features focus on organizational control, governance, and compliance.
No artificial upgrade pressure: Premium features are purely additive. Community functionality is never removed.

Features by Edition

Below are the key features. A check mark means the feature is available, and a cross means it’s not available in the associated edition.

Feature	Community	Premium
Access Policy	✅	✅
App Store*	✅	✅
Backups	✅	✅
Certificate	✅	✅
Federation*	✅	✅
Maintenance	✅	✅
Network Protection	✅	✅
Networking	✅	✅
Single Sign-On*	✅	✅
Users	✅	✅
Groups	❌	✅
Terminal	❌	✅
Compliance*	❌	✅
Email*	❌	✅
Monitoring*	❌	✅
Report*	❌	✅
Retention*	❌	✅

(*) Not or only partly implemented yet.

Access Policy

Admins can set an access policy for each individual app, such as:

authenticated: Only logged-in users can access the app.
public: Anyone can access the app without logging in. This is ideal for blogs, forums, or websites.

Apps Store

The App Store is the central location for downloading and installing apps and updates. Anyone can upload their own apps.

Backups

Create backups of your apps on an external server, and restore them when needed. Also, backups enable effortless migration between servers, reducing the process to just a few clicks.

Certificate

Ocelot-Cloud enables you to generate certificates that encrypt network data transmitted between users’ browsers and the app.

Federation

Multiple Ocelot-Cloud instances can be combined into private clusters, allowing a single account to access all servers within that cluster. In addition, a global cluster is available. With a single, global account, you can sign in to all participating nodes worldwide.

Maintenance

Ocelot-Cloud runs a background maintenance agent that automatically updates installed apps, creates backups, and removes outdated backups.

Network Protection

The HTTP protection layer enforces a maximum request body size, per-IP rate limiting, and server timeouts.

Networking

When an app is installed, Ocelot-Cloud acts as a network proxy so that users can immediately access the app through a subdomain.

Single Sign-On

Provides integrated identity and single sign-on (SSO) capabilities based on OpenID Connect (OIDC), so each user only needs a single account to access apps.

Users

Create user accounts and grant them access to apps.

Groups

Groups allow you to organize people by role, team, or department and manage which apps they can access across your organization.

Terminal

Provides secure, browser-based shell access to app containers. It allows administrators to directly interact with running apps for tasks such as initial setup, troubleshooting, maintenance, configuration changes, and advanced debugging, without requiring SSH access to the host system.

Compliance

Administrators can define and manage compliance documents such as terms of service, privacy policies, or codes of conduct. Users can be required to explicitly agree to these documents before accessing the platform. Each consent is recorded as evidence to help protect administrators in the event of future legal disputes.

Email

The email function simplifies user invitations and enables password resets. It also allows system reports to be sent about important events, such as updates, backups, and critical system conditions.

Monitoring

In digital infrastructure, logs, metrics, and other telemetry data are often scattered across multiple apps. Ocelot-Cloud centralizes the collection of this data, including system metrics (CPU, memory, disk, and network utilization) and usage statistics. A built-in GUI provides visualization and analysis, offering a unified view.

Ocelot-Cloud uses collected data to send administrators alerts about critical events, such as high CPU load or low disk space.

Report

Administrators receive reports about maintenance events, such as app updates, backups, and critical conditions.

Retention

Apps generate data that accumulates over time. A retention policy determines how long this data is kept before it is automatically deleted. This helps to manage storage efficiently by removing outdated data.