Feature Matrix
| Feature | OSS | With licensed plugins |
|---|---|---|
| Core Process Management | ✅ | ✅ |
| Dependency Orchestration | ✅ | ✅ |
| Atomic OTA Updates | ✅ | ✅ |
| Health Checks (TCP/HTTP) | ✅ | ✅ |
| Web UI (Dashboard) | ❌ | ✅ (ui plugin) |
| Log Rotation & Streaming | ✅ | ✅ |
| Prometheus Metrics | ✅ (basic) | ✅ (+ plugin metrics) |
| Historical Logs API | ✅ | ✅ |
| System Stats API | ✅ | ✅ |
Event Hooks ([[event_hooks]]) | ✅ | ✅ |
| Cron Scheduled Tasks | ✅ | ✅ |
| Linux Cgroups Isolation | ❌ | ✅ (isolation plugin, Linux only) |
| RBAC (User Roles) | ❌ | ✅ (security plugin — required for licensed startup) |
| Audit Logging | ❌ | ✅ (security plugin — required for licensed startup) |
| Webhook Notifications | ❌ | ✅ (notify plugin) |
| License | MIT | Commercial plugin license |
Same superd and super binaries for both columns — drop plugins/*.so + [license].key in conf/super.toml to enable the right-hand column.
securityis included with every subscription and is required for startup when[license].keyis valid. RBAC, audit logs, and API token auth come from thesecurityplugin. See Authentication.
Which setup do I need?
OSS only
- Personal projects, homelab, or local development.
- Loopback-first defaults (
127.0.0.1,allow_insecure_public_bind = false); explicit opt-in required for network-facing bind without auth. - Trusted private network (VPN/VPC) with firewall in front of the API if you must expose the port.
- No strict per-process CPU/memory enforcement.
Licensed plugins
security.so+auth_secret— required for any licensed startup (included with subscription).auth_secretbootstraps Access Tokens; Admins may explicitly disable it after creating an Admin token.- PaaS or shared hosting with cgroup isolation (
isolation, Linux hosts only). - Webhook notifications for on-call (
notify). - Visual dashboard (
ui) — requiressecurityfor licensed startup. - Regulated environments needing audit logs (
security). - Exposing API/Dashboard beyond localhost —
securityis always loaded when licensed; configure bind and tokens accordingly.