UTMStack

Deploy UTMStack anywhere

Install the open source platform on your own hardware in about 30 minutes, run it as a virtual appliance, or let us host it for you.

  • UTMStack Cloud

    One-click deployment to a dedicated, compliant instance that we host and update. Free trial available.

    Deploy in the cloud

  • Linux installer

    Install on a physical server, a virtual machine or a cloud instance running Ubuntu 24.04 LTS or a Red Hat compatible system.

    See the commands

  • Virtual appliance (ISO)

    An image that bundles Ubuntu with UTMStack for VMware, Hyper-V, Proxmox, OpenStack or any common hypervisor.

    Read the ISO guide

Install on a Linux server or virtual machine

UTMStack installs on its own Linux machine: a physical server, a virtual machine on VMware, Hyper-V or Proxmox, or a cloud instance. Use a fresh Ubuntu 24.04 LTS system (or a Red Hat compatible one, with dnf instead of apt).

Use a dedicated machine

The installer sets up the whole system for UTMStack. Do not run it on a laptop, a desktop or a server that already runs other services.

  1. 1Create the Linux server or virtual machine with the sizing below and internet access.
  2. 2Connect to it over SSH and run the install commands. Installation takes 15 to 30 minutes.
  3. 3Open https://your-server-address in your browser and sign in as admin. The password is saved in /root/utmstack.yml on the server.
Full installation guide Releases on GitHub
Run on the Linux server (Ubuntu 24.04 LTS)
sudo apt update
sudo apt install wget
wget https://github.com/utmstack/UTMStack/releases/latest/download/installer
sudo su
chmod +x installer
./installer

To remove UTMStack later, run ./installer --remove.

System requirements

Sized for one month of hot storage. Multiply the disk by the number of months you want to keep hot. Use SSD or NVMe storage.

  • Small

    Data sources
    50
    Data a month
    120 GB
    CPU
    4 cores
    Memory
    16 GB
    Disk
    150 GB

  • Medium

    Data sources
    120
    Data a month
    250 GB
    CPU
    8 cores
    Memory
    16 GB
    Disk
    250 GB

  • Large

    Data sources
    240
    Data a month
    500 GB
    CPU
    16 cores
    Memory
    32 GB
    Disk
    500 GB

  • Enterprise

    Data sources
    500
    Data a month
    1 TB
    CPU
    32 cores
    Memory
    64 GB
    Disk
    1 TB

Platforms. Ubuntu 24.04 LTS (recommended) or Red Hat compatible Linux, on VMware ESXi, Proxmox VE, KVM, Hyper-V, AWS or Azure.

Network. 100 Mbps for small installs, 1 Gbps for medium and large, 10 Gbps above 500 sources. Cloud integrations only need outbound HTTPS.

More than 500 sources? Add worker nodes with the same installer. Detailed requirements

Built for hybrid environments

Whether you run in the cloud or in your own data center, every UTMStack feature is available. Large networks can use more than one appliance, federated into one view.

Installation questions

Is UTMStack really free?

Yes. The Community edition is open source under AGPL-3.0 and free to run on your own hardware. Enterprise adds AI agents, more compliance frameworks, single sign-on and 24/7 support.

How long does installation take?

Usually 15 to 30 minutes on a server that meets the requirements. The installer sets up every component and prints where to find the admin password.

What happens after installation?

Open the server address over HTTPS and sign in as admin. The generated password is stored in /root/utmstack.yml. Then install agents and connect integrations from the console.

What if I have more than 500 data sources?

Use a larger server, or split sources across several servers and view them together in the federation console (Enterprise). Talk to us and we will help you size it.

Which browsers are supported?

The latest two versions of Chrome (recommended) and Microsoft Edge.

Rather not install it yourself?

Start a hosted instance in minutes, or have our engineers set it up with you.

Need to extend your SOC team?

Our analysts work as an extension of your security team: they cover nights and weekends, take alert overflow and back you up on hard incidents. Book a 30-minute call to plan the coverage you need.

Talk to an expertSOC extension

Want to try UTMStack?

Click through the live demo in your browser with no sign-up, start a free cloud instance, or install the open source edition on your own server in about 30 minutes.

Start free trialLive demoInstall free