Sold by: Lynxroute
Deployed on AWS
Free Trial
This product has charges associated with it for hardening, security configuration, and support.
GlitchTip is an open-source error tracking and application monitoring platform - a Django application with a bundled PostgreSQL 18 database and Valkey 9 cache. This Lynxroute build is hardened and ready out of the box: signing key and database password generated at first launch, sign-up closed after the first account is claimed, nginx TLS on 443 with a per-instance certificate, database and cache unreachable from the network, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
MIT license - fully auditable, no vendor lock-in.
Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS GLITCHTIP
GlitchTip is an open-source error tracking and application monitoring platform, built as a Django application served by the Granian ASGI server. Applications report exceptions to it through the widely used open-source client libraries, so instrumenting one usually means installing a package and setting a single DSN environment variable. Similar events are grouped into issues carrying a stack trace, breadcrumbs, request context and release information, so you see one problem with an occurrence count instead of thousands of duplicate alerts. Alongside errors it ingests structured logs and runs scheduled uptime monitors against your endpoints. Issues can be assigned, commented on and resolved; alerts are delivered by email or webhook. Organizations, projects, issues and events persist in a bundled PostgreSQL 18 database, with a bundled Valkey 9 cache. GlitchTip is an independent project under the MIT license, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- Signing key and database password generated at first launch into /root/glitchtip-credentials.txt - nothing is baked into the AMI, so no two instances share a secret
- Sign-up closed by default - the first visitor claims the administrator account, and every later attempt is refused automatically
- nginx terminates TLS on 443 with a per-instance certificate generated at first launch; Certbot and its nginx plugin are pre-installed for a CA-signed one
- PostgreSQL 18 and Valkey 9 bound inside the application network only - both are unreachable from outside the instance and publish no host port
- Per-project ingest keys, and a duplicate event is rejected rather than counted twice
- Debug mode and the test API disabled - the shipped configuration is the production one
- Container log rotation capped so a restarting container cannot fill the root volume
- External purchase and donation prompts removed from the bundled web interface; product documentation links are kept
- UFW firewall pre-configured - only 22, 80 and 443 open; the application port, database and cache are blocked
- fail2ban SSH brute-force protection, AppArmor mandatory access control
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- GlitchTip security baked in: signing key and database password generated at first launch, sign-up closed after the first account is claimed, nginx TLS on 443 with a per-instance certificate, PostgreSQL and Valkey unreachable from the network, UFW firewall pre-configured.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Self-hosted error tracking with no per-event pricing: exception grouping with stack traces and breadcrumbs, structured log ingest, scheduled uptime monitors, email and webhook alerts, bundled PostgreSQL 18 and Valkey 9. MIT license - fully auditable, no vendor lock-in.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $0.05 |
t3.medium | $0.03 |
m6i.large | $0.05 |
Dimensions summary
You pay by the hour for the AWS EC2 instance that runs GlitchTip, which bundles error tracking and uptime monitoring in one self-hosted package. The three dimensions are instance-size choices, not feature tiers. Each option carries the same software but differs in compute capacity. The t3.medium and t3.large run on burstable general-purpose hardware, with t3.large offering more resources. The m6i.large uses a fixed-performance general-purpose class. You select the size that matches your expected workload. Billing scales with how many hours the chosen instance runs.
Top-of-mind questions for buyers
Each hourly rate covers one running AWS EC2 instance of the chosen class. The t3.medium and t3.large are burstable general-purpose instances, with t3.large carrying more vCPU and memory. The m6i.large is a fixed-performance general-purpose instance. You pick the size that matches your expected error and monitoring volume.
The software charge meters running hours only. A fully stopped instance accrues no hourly software fee. You may still pay underlying AWS charges, such as storage for the instance volume, while it sits stopped. Charges resume when you start the instance again.
They differ only in compute capacity. Each size runs the same self-hosted package, which combines error tracking and uptime monitoring. Choosing a size does not add or remove product features. You select based on the workload the instance must handle, not the functionality you receive.
glitchtip.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
GlitchTip 6.2.6
- GlitchTip 6.2.6 on Ubuntu 24.04 LTS - patch update from 6.2.2 on the 6.2 line
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- Error tracking, structured log ingest and uptime monitoring in one instance; applications report through the widely used open-source client libraries
- Bundled PostgreSQL 18 and Valkey 9 - no external managed database or cache required
- Signing key and database password generated at first launch into /root/glitchtip-credentials.txt; nothing is baked into the image
- Sign-up closed by default - the first visitor claims the administrator account, and every later attempt is refused automatically
- Nginx TLS on 443 with a per-instance certificate; Certbot pre-installed for a CA-signed one
- PostgreSQL and Valkey are reachable only by the application and publish no host port
- Container log rotation capped so a restarting container cannot fill the root volume
- UFW firewall pre-configured (ports 22, 80, 443 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.large recommended, t3.medium minimum)
- Open Security Group - allow TCP 443 from YOUR IP ONLY for now, and TCP 22 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/glitchtip-credentials.txt
- Open https://<PUBLIC_IP>/ in your browser - accept the self-signed certificate warning. First launch takes 2-4 minutes and shows a loading page until the instance is ready
- Click Register and sign up with your own email address - the first account created becomes the administrator, and sign-up then closes permanently
- Create an organization, then a project. The project's DSN is shown under Settings, Client Keys
- Set that DSN in your application and trigger one error to confirm the round trip
Restrict TCP 443 to your own address before you register. The first visitor to reach the instance claims the administrator account. Credentials are saved to /root/glitchtip-credentials.txt at first launch, readable by root only. Email is intentionally unconfigured, so the interface offers copy-link team invitations instead of mailed ones. To enable password-reset and invitation mail, add an EMAIL_URL line to /opt/glitchtip/.env and run: cd /opt/glitchtip && sudo docker compose up -d Uptime monitors and webhook alerts work without any mail configuration. Replace the self-signed TLS certificate with a CA-signed one for production use: sudo certbot --nginx -d yourdomain.com
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For GlitchTip documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for the provision and deployment of the application and AMI support. GlitchTip Error Tracking Server Sentry compatible, open source monitoring for small and medium businesses. Self hosted on Ubuntu server, with PostgreSQL and Redis preconfigured for instant deployment.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.