Open-core. Free forever for the core. Pro for teams.
WatchTower is Apache-2.0 + ELv2. Self-host the whole thing for free. Pro adds the features teams need to run production-grade infra together — team RBAC, audit log, multi-region failover, SSO, priority support.
Free
$0 / forever
- ✓All deploy + build featuresGit-push deploys, multi-node SSH, container update daemon, templates, webhooks, queues.
- ✓Single-user installsPersonal infra, homelabs, side projects.
- ✓All integrationsCloudflare, Tailscale, GitHub OAuth + Device Flow, SMTP, LLM agent.
- ✓Self-host on your hardwareNo data leaves your servers. SQLite or Postgres backend.
- ✓Community supportGitHub Issues + Discussions.
Pro
Coming soon · launching with billing
- ✓Everything in FreeAll Free features included.
- ✓Audit LogSee every who-did-what — project create, deploy trigger, env-var change. SOC 2 / ISO 27001 evidence.
- ✓Team Roles & PermissionsOwner / maintainer / viewer per org. Restrict who can deploy to production vs. staging.
- ✓Multi-region FailoverSame project across primary + standby nodes. Cloudflare Load Balancer routes + fails over.
- ✓SSO (SAML / OIDC)Okta, Google Workspace, Azure AD, any SAML 2.0 / OIDC. SCIM-driven offboarding.
- ✓Priority Email SupportDirect email with response SLA. Migration + HA architecture review.
Commercial License
Talk to us · custom pricing
- ✓Everything in ProAll Pro features unlocked under a written agreement.
- ✓Resell as a hosted serviceOffer WatchTower (including Pro features) as a SaaS to your customers. The default Elastic License blocks this; the Commercial License grants it.
- ✓Embed in your productOEM rights: ship WatchTower inside your product as the deployment engine, with your branding. Your customers stay your customers.
- ✓Removable attributionNo public-source-availability obligation. Useful for regulated environments and white-label deployments.
- ✓Written contract + warrantyDefined SLA, support response targets, liability terms — what your legal team will ask for. See the template.
- ✓Direct vendor supportMaintainer-direct channel. Architecture review for HA + migration assistance included.
FAQ
What's the license?
WatchTower is dual-licensed. The free option is Apache 2.0 (root) + Elastic License 2.0 (the pro/ directory). Use it freely for self-hosting and internal commercial use. If you want to offer WatchTower as a hosted SaaS to third parties, embed it in a product you ship, or operate without ELv2's public-source-availability obligations, you need the Commercial License. Pricing is custom — email opensource@sinhaankur.dev to start.
Can I switch between Free and Pro?
Yes. Pro features are gated by a single env var today (WATCHTOWER_TIER=pro). When billing launches, this becomes a license-key check. Removing the key takes you back to Free — your data stays put, the gated routes return 402 with an upgrade prompt.
Will Pro be self-hosted too?
Yes. Pro features run inside the same FastAPI process. License validation pings a license server, but that's the only network call. No telemetry, no usage reporting.
I just want the deploy stuff. Do I need Pro?
No. Free covers everything most operators need. Pro is specifically for team collaboration, compliance, and HA — situations where having multiple humans share an installation creates new requirements.