Docker manager for one host or a whole fleet. - Manage local, remote TLS, and NAT'd/VPS hosts from one UI - Deploy & update Compose stacks, incl. from Git with auto-sync - Live logs, metrics, and an in-browser container shell - Scan every image for CVEs (Grype/Trivy) before it ships - Inject secrets from 1Password, Vault, Infisical, Doppler - Encrypted backups to local, S3, or GCS - Semver update badges with release notes - SSO, LDAP, and role-based access Hardened and free.
We have built Dockhand because managing Docker across a homelab or enterprise meant juggling terminal tabs, half-abandoned dashboards, and SSH sessions - and none of them did everything we needed in one place.
So Dockhand is the tool we wanted: one clean UI for every host (local, remote, or NAT'd behind an agent), Compose stacks you can deploy straight from Git, live logs and an in-browser shell, CVE scanning before anything ships, and secrets pulled from 1Password/Vault/Infisical/Proton Pass without ever touching disk. Self-hosted, security-hardened, and free for personal use.
It's actively developed and we'd genuinely love your feedback - what would make it a keeper for your setup? Happy to answer anything in the comments.
what would make it a keeper for me: the CVE scanning before ship. We run a handful of small services and half our "known issues" are CVEs in base images we can't easily rebase without breaking something else. Does Dockhand just flag those every time, or is there a way to accept/allowlist a specific CVE on a specific image so it stops nagging you about something you've already decided is an acceptable risk? That distinction is usually what makes people ignore a scanner entirely after week two.
Managing Docker across multiple machines can get messy fast. Nice to see everything brought together in one clean interface.
How does this compare to just running Docker Desktop / Portainer? What's the main gap it fills?
About Dockhand on Product Hunt
“Docker management for everyone”
Dockhand launched on Product Hunt on August 21st, 2026 and earned 121 upvotes and 9 comments, placing #7 on the daily leaderboard. Docker manager for one host or a whole fleet. - Manage local, remote TLS, and NAT'd/VPS hosts from one UI - Deploy & update Compose stacks, incl. from Git with auto-sync - Live logs, metrics, and an in-browser container shell - Scan every image for CVEs (Grype/Trivy) before it ships - Inject secrets from 1Password, Vault, Infisical, Doppler - Encrypted backups to local, S3, or GCS - Semver update badges with release notes - SSO, LDAP, and role-based access Hardened and free.
Dockhand was featured in Software Engineering (42.9k followers), Developer Tools (517.9k followers), GitHub (41.4k followers) and Tech (630.5k followers) on Product Hunt. Together, these topics include over 282.6k products, making this a competitive space to launch in.
Who hunted Dockhand?
Dockhand was hunted by Jarek Krochmalski. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Dockhand stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Jarek Krochmalski
Hey Product Hunt 👋
We have built Dockhand because managing Docker across a homelab or enterprise meant juggling terminal tabs, half-abandoned dashboards, and SSH sessions - and none of them did everything we needed in one place.
So Dockhand is the tool we wanted: one clean UI for every host (local, remote, or NAT'd behind an agent), Compose stacks you can deploy straight from Git, live logs and an in-browser shell, CVE scanning before anything ships, and secrets pulled from 1Password/Vault/Infisical/Proton Pass without ever touching disk. Self-hosted, security-hardened, and free for personal use.
It's actively developed and we'd genuinely love your feedback - what would make it a keeper for your setup? Happy to answer anything in the comments.