Harbor
What it is
Harbor is a free, open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It provides a web interface and an extensible API, and can be installed on Kubernetes or on a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It can replicate images and charts to and from other registries in pull or push mode; compatible services include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options include database, LDAP/Active Directory, and OIDC. Selecting database authentication and adding local users prevents switching to another mode. Project storage quotas are unlimited by default but can be set globally or for individual projects. Harbor is a Cloud Native Computing Foundation Graduated project. HTTPS is recommended in production, since HTTP outside air-gapped test or development environments exposes connections to man-in-the-middle attacks. Robot account secrets must be saved when created, and robot accounts cannot log in to the user interface.
For and against
For
- Free, open-source artifact registry
- Supports image signing and vulnerability scanning
- Replicates images and charts between registries
- Unlimited project quotas by default
- Web UI and extensible API
Against
- Trivy scanning must be enabled during installation
- Database authentication can prevent switching modes
- Robot accounts cannot log into the user interface
- HTTPS is recommended for production
The verdict
Harbor combines registry management with access controls, scanning, signing, and replication. Teams should choose their authentication mode carefully and configure HTTPS for production use.
Who it suits
Harbor suits teams managing artifacts for Kubernetes, Docker, and other cloud-native platforms. Its API, registry replication, and authentication options may fit teams operating their own registry infrastructure.
Plans and prices
Harbor
Open source registry; project storage quotas are unlimited by default
Read 11 Oct 2026 · goharbor.io
On the record
- Authentication
- Harbor supports database, LDAP/Active Directory, and OIDC authentication; choosing database authentication and adding local users prevents switching to another mode.goharbor.io · read 11 Oct 2026
- Deployment
- Harbor can be installed on Kubernetes or on a system with Docker support.goharbor.io · read 11 Oct 2026
- HTTPS
- Harbor recommends HTTPS in production and warns that HTTP outside air-gapped test or development environments exposes connections to man-in-the-middle attacks.goharbor.io · read 11 Oct 2026
- Integrations
- The compatibility list includes registry adapters such as Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry.goharbor.io · read 11 Oct 2026
- Project status
- Harbor is a Cloud Native Computing Foundation Graduated project.goharbor.io · read 11 Oct 2026
- Replication
- Harbor can replicate images and charts between Harbor and non-Harbor registries in pull or push mode.goharbor.io · read 11 Oct 2026
- Robot account limit
- Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface.goharbor.io · read 11 Oct 2026
- Security features
- Harbor supports policies, role-based access control, vulnerability scanning, and image signing and validation.goharbor.io · read 11 Oct 2026
- Storage quotas
- Project storage quotas are unlimited by default and can be set globally or for individual projects.goharbor.io · read 11 Oct 2026
- Vulnerability scanning
- Harbor provides image vulnerability scanning through Trivy when enabled during installation, and can connect to additional scanners.goharbor.io · read 11 Oct 2026
- Web UI and API
- Harbor provides an extensible API and web UI.goharbor.io · read 11 Oct 2026
- What it does
- Harbor is an open source registry for securely managing artifacts across cloud native platforms such as Kubernetes and Docker.goharbor.io · read 11 Oct 2026
