DCMS

Features

Git Deployments AI Editor Web Editor File Manager SSH & Terminal Databases Domains & DNS Email Hosting Metrics Security Automation

More

All features Pricing Install Contact Customer Portal Install free

Security

Locked down from the first boot

DCMS ships defence in depth, preconfigured: a panel that never runs as root, an nftables firewall you manage from the UI, and Trivy vulnerability scans after every deploy. Serious security without a security team.

Panel never runs as root Trivy scan after every deploy Automatic HTTPS everywhere

Vulnerability scans

Every deploy leaves with a security report

Trivy scans the instance workspace automatically after every deploy, rebuild and update, and on demand whenever you want a fresh look. No setup, no separate tooling.

  • Automatic scansafter deploy, rebuild and update; run one any time with a click.
  • Severity summaryfrom UNKNOWN to CRITICAL, readable at a glance.
  • Top findings stored per instanceso you can see what a deploy introduced.
  • Zero configurationscanning is on from the moment DCMS is installed.

Privilege separation

Not a root process with a web page on top

The DCMS panel runs as an unprivileged system user. Privileged host changes, like domains, DNS, firewall, cron and updates, go through small root-owned helper scripts triggered by systemd path watchers.

  • Unprivileged panelthe web process you expose has no root rights to abuse.
  • Root-owned helpersdo the privileged work, one narrow job each.
  • systemd path watchersconnect the two; there is no root API to attack.
  • Covers domains, DNS, firewall, cron and updatesthe changes that matter.

Access and isolation

No passwords to steal, no networks to cross

You sign in with a 6-digit PIN emailed to you, valid for 10 minutes, so there is no password database waiting to leak. Around it, DCMS keeps workloads apart and traffic encrypted by default.

  • Passwordless sign-inemailed 6-digit PINs that expire after 10 minutes.
  • Isolated Docker network per projectso one project cannot reach into another.
  • Automatic HTTPS everywherefor the panel and every site you host.
  • SFTP brute-force lockoutfeeds the firewall blocklist automatically.
0 root panelprocesses: privileged host changes run through root-owned helper scripts
Every deploygets a Trivy vulnerability scan of the instance workspace, automatically
6-digit PINpasswordless sign-in by email, each code valid for 10 minutes

Ship on a server that defends itself

Install DCMS free and get the firewall, vulnerability scans and privilege separation configured from the first boot.

$ curl -fsSL https://dcms.fra1.cdn.digitaloceanspaces.com/dcms/install.sh | bash
Read the install guide See pricing