What is Caddy?
An open-source HTTP server that automatically enables and renews HTTPS certificates for all domains, provides flexible JSON-based configuration with adapters for other formats, and includes a fully-managed internal PKI system for securing internal services and clusters.
Caddy pricing
We don't have Caddy's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.
Open source with optional paid commercial support through sponsorship tiers
Platform & deployment
Independently observed- CLI
- macOS
- Linux
- Windows
- Self-hosted
Integrations (14)
Independently observed- Cloudflare
- Google Cloud DNS
- TencentCloud DNS
- Docker
- Kubernetes
- Consul
- CrowdSec
- Umami
- Bunny CDN
- OAuth 2.0
- LDAP
- OpenID Connect
- SAML
- Google Cloud KMS
Security & compliance
Known vulnerabilities: 7 (3 in the last 12 months), max severity CRITICAL sourcea count reflects scale & disclosure, not quality
Caddy alternatives
Other reverse proxies we track, ranked by the same independent score.
Compare Caddy
Side by side against other reverse proxies, attribute by attribute, with a source on every value.
The Vioscale score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Caddy, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Price level | 100 | 0.05 | 5.2 | ✓ |
| Release cadence | 87 | 0.05 | 4.5 | ✓ |
| Development activity | 46 | 0.09 | 4.3 | ✓ |
| Security score | 92 | 0.04 | 3.9 | ✓ |
| Dependent projects | 56 | 0.06 | 3.5 | ✓ |
| Integrations | 34 | 0.09 | 3.2 | ✓ |
| Stars | 92 | 0.03 | 2.4 | ✓ |
| Pricing transparency | 25 | 0.08 | 2.1 | ✓ |
| Security posture | 25 | 0.07 | 1.8 | ✓ |
| Reliability | 0 | 0.07 | 0.0 | - |
| Capabilities | 0 | 0.08 | 0.0 | - |
| Package downloads | 0 | 0.14 | 0.0 | - |
| Developer Q&A activity | 0 | 0.06 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Activity
| Attribute | Value | Evidence |
|---|---|---|
| Commits last 30d | 28 | mediumsource · 2026-08-26 · 65% |
Adoption
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 14 | mediumsource · 2026-08-19 · 60% |
Language
| Attribute | Value | Evidence |
|---|---|---|
| Primary | Go | highsource · 2026-08-26 · 90% |
License
| Attribute | Value | Evidence |
|---|---|---|
| Spdx | Apache-2.0 | highsource · 2026-08-26 · 95% |
Pricing
Release
Security
| Attribute | Value | Evidence |
|---|---|---|
| Hipaa | Yes | mediumsource · 2026-08-19 · 60% |
| Pci | Yes | mediumsource · 2026-08-19 · 60% |
| Scorecard | 9.2 | highsource · 2026-08-26 · 90% |
| Vulnerabilities | Count: 7 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2Fcaddyserver%2Fcaddy&per_page=100 · Last 12m: 3 · Max severity: CRITICAL | highsource · 2026-08-26 · 90% |