Free keeps you quiet. Pro goes looking.
Free is the whole alerting product — smart alerts, search and stats, an inbox you get back. Pay when you want the problems nothing alerted on. No seats, no sales calls.
Free
Alerts worth reading, and an inbox you get back.
- Smart alerts — what broke, which container, how bad
- Escalation that folds repeats — 47 crashes arrive as one alert that says 47
- Quiet by default — suppression, quiet hours and severity filters on every channel
- Search indexed into Dozzle — every event searchable the moment it arrives
- Stats monitoring — CPU, memory, network and disk kept as history
- Every channel — Slack, email, Discord, Telegram, ntfy, web push
- 2,000 triaged events / month · 10 GB searchable, 24-hour retention
- 10 assistant chats / month · unlimited MCP
- One finding a week — the most serious thing nothing alerted on
Pro
It goes looking before anything alerts.
Everything in Free, plus:
- Proactive triage — reads your error logs every morning and finds what never fired an alert
- Every finding, daily, each with the fix — not one a week with the rest locked
- Triage that goes and looks — when the alert alone isn't enough, it inspects the container and reads the surrounding logs before deciding
- Full investigations — one click, more passes, a stronger model, root cause and steps
- Findings tracked day to day — still happening, day four, three times worse
- Every host, one dashboard — connect as many Dozzle instances as you run
- 50K triaged events / month · 50 GB searchable, 30-day retention
- Stats monitoring, 30 days back
- 200 assistant chats / month · priority support
Team
The same product, sized for a team's stack.
Everything in Pro, plus:
- 250K triaged events / month
- 100 GB searchable, 30-day retention
- 1,000 assistant chats / month
What changes with each tier.
| Limit | Free | Pro | Team |
|---|---|---|---|
| Findings (reads your logs, finds what never alerted) | 1 / week | All, daily | All, daily |
| Fix for each finding | — | Included | Included |
| Triage inspects containers and logs when unsure | — | Yes | Yes |
| Full investigation on demand | — | Included | Included |
| Triaged events / month | 2,000 | 50K | 250K |
| Searchable logs | 10 GB · 24 hours | 50 GB · 30 days | 100 GB · 30 days |
| Alert and event history | 1 day | 14 days | 30 days |
| Stats history (CPU, memory, network, disk) New | 24 hours | 30 days | 30 days |
| Connected Dozzle instances | 1 | Unlimited | Unlimited |
| Assistant chats / month | 10 | 200 | 1,000 |
| Priority support | — | Yes | Yes |
Smart alerts, repeat folding, suppression and quiet hours, search indexing, stats monitoring, every channel, remote control, and unlimited MCP server access are on every plan, including Free.
What does Free actually cover?
The alerting half, in full. Every alert your Dozzle rules fire is triaged into a sentence that names the cause, the container and the severity; repeats fold into the alert that already exists with a count instead of arriving forty-seven times; suppression, quiet hours and severity filters work per channel. Search indexing sits inside Dozzle, so every event from every connected instance is queryable the second it lands, and stats monitoring — CPU, memory, network and disk — is recorded and charted. Nothing there is a trial or a teaser. If the goal is an inbox that only interrupts you when something is genuinely wrong, Free is the whole product.
So what am I paying for on Pro?
The part that doesn't wait for an alert. Pro reads your error logs every morning, collapses them into patterns, and reports what is worth fixing — including the problems no rule was ever written for, on days nothing fired at all. That is when a disk creeping toward full or a container quietly restart-looping shows up. Each finding comes with the fix, ages day to day while the problem lasts, and closes when it stops. Triage also gets live tools on Pro: when the alert alone leaves it unsure, it inspects the container and reads the surrounding logs before deciding, instead of guessing from the alert text.
What's a Full investigation, and how is it different from triage?
Triage runs on every plan: it watches your containers, groups the noise, tells you what broke, and keeps you quiet when nothing's wrong. On Free it decides from the alert itself; on Pro and Team it can also inspect the container and read the surrounding logs first — and it flags when it couldn't pin the cause down. A Full investigation (Pro and Team) is the deep dive for exactly those cases: one click and it keeps digging — more passes, a stronger model, correlating across your containers, hosts and timeline — then hands you concrete steps to fix it. Same idea, taken further, with a fix at the end.
Who gets findings?
Everyone, at a different pace. A newly connected instance gets 7 days of the full thing: every finding, every morning. After that, Free runs the review once a week and shows the most serious finding; the rest appear locked, with just the container names. Pro and Team run it every morning, show every finding, and add the fix — with live container state, stats and history behind it.
Does search or stats monitoring cost extra?
No. Search indexing is on from the moment an instance connects, and CPU, memory, network and disk series stream from your Dozzle instances and are stored at no charge on every plan — they never touch your triaged-event count. The plan only changes how much and how far back: 10 GB and 24 hours on Free, 50 GB on Pro and 100 GB on Team — both searchable 30 days back — with 30 days of stats on both paid plans.
What counts as a triaged event?
Any container event or matching log line that's fed through the triage pipeline, which decides whether to send a new alert, fold it into an existing one, or stay silent. You're paying for that work, not for raw storage.
What happens if I go over?
Nothing breaks. You drop into sampling mode: triage pauses, your event history keeps recording, and roughly one in ten events comes through as a raw alert so you can still see what's happening. You'll feel it in your inbox before you see it on a usage page.
If a container exits 47 times, is that 47 events?
Yes against the limit. But you get one alert that says 47, not 47 alerts. That's the whole point.
Will 2,000 triaged events be enough?
For almost everyone: 95% of accounts use under 1,200 a month. Only a genuine firehose — a container crash-looping for days — goes past it, and the alert that names the container arrives long before the limit does. Upgrade anytime, no data lost.
Do findings count against my events?
No. Triaged events are alerts your Dozzle rules fired. The log review reads your logs instead, so it costs nothing against that limit — weekly on Free, every morning on Pro and Team, with no alert rules configured at all. Only your monthly log volume applies.