Skip to content
SPECIFICTION
Get listed

Harbor

goharbor.io

Free plan WebLinuxAPISelf-hosted
Visit goharbor.io
Spec score 7.9 #13 of 60 in Container Registries

What it is

Harbor is an open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It offers a web UI and extensible API, and can be installed on Kubernetes or a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It replicates images and charts to or from other registries in pull or push mode; listed adapters include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options are database, LDAP/Active Directory, and OIDC, though choosing database authentication and adding local users prevents a later switch to another mode. Project storage quotas are unlimited by default but can be set globally or per project. Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface. Harbor is a CNCF Graduated project. HTTPS is recommended for production use.

Spec sheet

What it does
Harbor is an open source registry for securely managing artifacts across cloud native platforms such as Kubernetes and Docker.Read 11 Oct 2026 · goharbor.io
Deployment
Harbor can be installed on Kubernetes or on a system with Docker support.Read 11 Oct 2026 · goharbor.io
Integrations
The compatibility list includes registry adapters such as Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry.Read 11 Oct 2026 · goharbor.io
Authentication
Harbor supports database, LDAP/Active Directory, and OIDC authentication; choosing database authentication and adding local users prevents switching to another mode.Read 11 Oct 2026 · goharbor.io
HTTPS
Harbor recommends HTTPS in production and warns that HTTP outside air-gapped test or development environments exposes connections to man-in-the-middle attacks.Read 11 Oct 2026 · goharbor.io
Project status
Harbor is a Cloud Native Computing Foundation Graduated project.Read 11 Oct 2026 · goharbor.io
Replication
Harbor can replicate images and charts between Harbor and non-Harbor registries in pull or push mode.Read 11 Oct 2026 · goharbor.io
Robot account limit
Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface.Read 11 Oct 2026 · goharbor.io
Security features
Harbor supports policies, role-based access control, vulnerability scanning, and image signing and validation.Read 11 Oct 2026 · goharbor.io
Storage quotas
Project storage quotas are unlimited by default and can be set globally or for individual projects.Read 11 Oct 2026 · goharbor.io
Vulnerability scanning
Harbor provides image vulnerability scanning through Trivy when enabled during installation, and can connect to additional scanners.Read 11 Oct 2026 · goharbor.io
Web UI and API
Harbor provides an extensible API and web UI.Read 11 Oct 2026 · goharbor.io

Plans and prices

Harbor Free Open source registry; project storage quotas are unlimited by default Read 11 Oct 2026 · goharbor.io

Every Harbor plan and price →

Strong points and limits

Strong points

  • Provides a web UI and extensible API.
  • Replicates images and charts in pull or push mode.
  • Supports LDAP/Active Directory and OIDC authentication.
  • Project storage quotas are unlimited by default.

Limits

  • Database authentication with local users prevents switching modes.
  • Robot account secrets must be saved when created.
  • Robot accounts cannot log into the user interface.
  • HTTP outside air-gapped test or development risks interception.

Who it suits

Harbor suits teams managing container or cloud-native artifacts that want a self-hosted registry with access controls, scanning, and replication. It can be installed on Kubernetes or a system with Docker support.

Verdict

Harbor combines registry management with scanning, signing, access controls, and replication. Plan authentication choices carefully, save robot secrets at creation, and use HTTPS in production.

Where Specifiction places it

Alternatives to HarborAll alternatives →