Skip to main content

Fully Managed Penpot
as a Service

Deploy Penpot as a fully managed service starting at €9/mo. Get automated backups, SSL, updates, support and monitoring included.

Penpot is an open-source design and prototyping platform — UI design, components, design tokens, prototypes, and real-time collaboration — combining the convenience of Figma with the security and control of self-hosted infrastructure. Files use open standards (SVG, CSS Grid, W3C design tokens), so what you draw stays portable across tools.

Free 7-day trial  99.9% Uptime SLA  No credit card  Cancel anytime

Free 7-day trial  99.9% Uptime SLA
No credit card  Cancel anytime

Penpot

Penpot

STARTING AT

€9/month
Automated Backups
Monitoring
Automated Updates
Auto SSL

USAGE

Unlimited
Human Support
Custom Domains
Terminal Access
File Manager Access
Deploy in your region 21 locations worldwide
GermanyFinlandNetherlandsUKSwedenUnited StatesCanadaSingaporeJapanAustraliaBrazilSouth Africa+9 more →
Penpot Preview Image

ABOUT THE SOFTWARE

What is Penpot

Penpot is an open-source design and prototyping platform built around open web standards. Designers draw with real CSS Grid and Flex layouts; developers inspect real CSS, SVG, and HTML; designs travel as portable .penpot files instead of vendor-locked binaries. It runs in the browser, on the desktop, or on infrastructure you choose.

Penpot is built by Kaleidos and released under the Mozilla Public License 2.0. The project is roughly 75% Clojure and ClojureScript with a Rust rendering engine (render-wasm) introduced in the 2.x series. The codebase carries over 22,000 commits and 47,500 GitHub stars, with the UI community-translated into 30 languages. Penpot is recognised as a Digital Public Good by the DPGA.

The product is in active production use at Mozilla, IBM, ByteDance, and Red Hat, and at France's Beta.gouv design-system team, which maintains betagouv/figpot — a public CLI that syncs Figma libraries into Penpot for civic services. Penpot's free hosted service at design.penpot.app is the same codebase you can self-host; self-hosted instances trail the SaaS by a few days while each new Docker image publishes.

FEATURES

What Penpot does

Penpot covers the full design and prototyping loop: drawing surfaces, components, design tokens, prototypes, and developer handoff. Layouts use real CSS Grid and Flex semantics rather than approximations, so what designers ship is what frontends consume. The 2.x line added a Rust rendering engine, native W3C design tokens, and a plugin system.

Design files and boards

Multi-board files, infinite canvas, vector primitives, masks, boolean operations, and unlimited zoom. Files use the open .penpot package format — no proprietary binary lock-in.

Native design tokens (W3C DTCG)

Tokens are first-class citizens, not a plugin. Colour, typography, spacing, and dimension tokens align to the W3C Design Tokens Community Group standard.

Interactive prototypes

Frame-to-frame interactions, triggers, animations, and overlay flows. Prototypes preview inline; shareable view-only links don't require a Penpot account.

Code Inspect (CSS, SVG, HTML)

Select any layer, copy production CSS, SVG markup, or HTML. Image fills keep aspect ratio on resize, so handoff matches what designers drew.

Components and Variants

Reusable design components with overrides and variant axes for state, size, and theme. Component libraries publish and consume across teams inside the same instance.

Real-time collaboration

Multi-cursor presence, live editing, comments, and history. Backed by the /ws/notifications WebSocket channel; works across browsers and the Penpot Desktop Electron app.

CSS Grid and Flex layout

Layouts use real Grid and Flex semantics inside the editor. The Inspect tab returns the CSS your developer would have written anyway.

Plugins and MCP server

Plugin API for extending the editor; Penpot Hub for sharing. An official MCP server feeds Penpot designs into AI coding agents like Claude and Cursor.

WHAT'S ALWAYS INCLUDED

Every app. Fully managed.
Nothing extra to pay for.

Every app you deploy includes the full managed service — security, backups, updates, and support from day one.

Automatic updates and patches

Apps run the latest stable version. Security patches applied silently, with rollback if needed.

Daily off-site backups

Multiple daily backups in redundant off-site locations. One-click restore if anything goes wrong.

24/7 uptime monitoring

Continuous monitoring with instant alerting. We respond before you notice.

SSL, firewall, DDoS protection

Auto-renewing SSL, hardened firewall rules, DDoS mitigation on every deployment.

Performance and scaling

We monitor resource usage continuously. When your app needs more headroom, we flag it and upgrade with your explicit approval.

Dedicated engineering support

Real engineers on chat. DNS, SMTP & migration help. All included in €9.

WHY MANAGED

Why teams pick managed Penpot

On March 11, 2025, Figma raised its Professional Full seat from roughly $12 to $15/month annual and bundled FigJam and Slides into every paid Full seat. A 10-seat design team's tool budget jumped past $1,800/year overnight. Penpot — open-source, same category, free to use — became a serious 2025 question.

Running Penpot in production is not just docker compose up. The stack needs Postgres ≥13, Redis or Valkey for WebSocket coordination, a JVM/Clojure backend, an nginx frontend, and a Node exporter for PDF and PNG generation. Each layer has its own patching cadence. Each has its own way of failing quietly when SMTP, OIDC, or backup credentials drift out of sync.

The most common production break we see: the reverse proxy doesn't forward the /ws/notifications path with WebSocket upgrade headers, so real-time collaboration silently fails — files load, but cursors don't move and changes don't sync across users. A close second is PENPOT_SECRET_KEY left unset in docker-compose, which invalidates every session and pending invitation on every container restart. Both are documented in Penpot's own technical guide; both still ship to production at small teams every week.

REVIEWS

Hear from customers ​like you​​​​​​​

Successful businesses and professionals around the world rely on DANIAN every day

USE CASES

Three teams who run Penpot on DANIAN

These are representative team types we set up most often. Each starts with the same flat €9 plan.

8-PERSON DESIGN AGENCY · BERLIN

Renewed Figma quote crossed €5,000/year after the March 2025 changes

Replaced a 6-Designer plus 2-PM Figma Professional setup with one Penpot instance in the Germany region. OIDC against Google Workspace, S3 asset backend, registration disabled. Client deliverables now ship as open .penpot files — no proprietary file lock-in when a project hands off to the client's internal team. Yearly tool budget dropped from ~€4,800 to €108.

12-PERSON SAAS STARTUP · REMOTE

Wanted design tokens, code, and CI on the same git timeline

Runs Penpot in the France region. Raised PENPOT_HTTP_SERVER_MAX_BODY_SIZE to ingest existing Figma libraries via the community Penpot Exporter plugin; pipes W3C DTCG tokens into a Style Dictionary build; uses Penpot's MCP server to feed live design context to Cursor and Claude. One €9 line item replaces rotating-contractor seat math.

UX DESIGN SCHOOL · MADRID

Two cohorts of 80 students per semester, isolated workspaces

Two Penpot apps in the Spain region, one per cohort. LDAP login against the institutional directory, telemetry disabled, shared template libraries pre-seeded. Students take their .penpot files with them on graduation. Tool spend per semester: €18 total — versus per-student educational-tier paperwork at the dominant SaaS alternative.

COMPARISON

Four ways to run Penpot

The choice usually comes down to cost at scale, ops time, and how much control over the data you need. The table below names the specific alternatives — Figma's published seat math, a self-hosted VPS path, a home server, and managed Penpot on DANIAN — and shows the totals at 1, 5, and 10 users.

 PATH1 USER5 USERS 10 USERSWHAT YOU CARRY
Figma Professional
Monthly billing, Full seats. After the March 11, 2025 change.
$16/mo$80/mo$160/moPer seat. Designer-only personas need Full seats; Dev Mode adds $12/seat. FigJam and Slides bundled whether you use them or not.
Self-host on a VPS
$24/mo production-class VPS, plus your time.
~$44/mo + time~$44/mo + time~$60/mo + time$24 VPS + $5 object backup + $15 monitoring = $44. Add 1–2 hrs/month for patching, certificate renewal, secret rotation, backup verification, WebSocket proxy debugging. Penpot 2.11 renamed asset-storage variables — read the release notes before each bump.
Home server
Synology DS923+ (~€650) or HP ProLiant ML30 Gen10 (~€800–1,500).
€210–667/mo€210–667/mo€210–667/moHardware amortised + electricity + business internet with static IP + off-site backup target + 2–4 ops hours/month. A backup on the same machine is not a backup.
DANIAN Managed Penpot€9/mo€9/mo€9/moPatching, monitoring, daily backups, S3 asset backend, OIDC/LDAP, custom domain, terminal access, human support. Customer ops time per month: 0 hours.

BY INDUSTRY

Penpot for specific industries

Four sectors put specific demands on a design tool: client-facing agencies need clean handoff and zero lock-in, public-sector and civic teams need open standards in their procurement, regulated companies need control over where files sit, and education programs need persistent isolated workspaces across cohorts. Each gets a slightly different DANIAN configuration.

Agency work concentrates risk in one place: the client's intellectual property sits on a designer's screen.

Penpot files use an open package format (.penpot), which means a final deliverable hands off cleanly — the client can open the file in their own Penpot instance or read the underlying SVG without buying a per-seat license to a proprietary editor.

On DANIAN, we run an agency's instance with OIDC tied to Google Workspace or Microsoft 365, registration locked down, per-client team isolation inside Penpot, and daily off-site backups in the agency's chosen region.

A six-Designer plus two-PM team on a comparable proprietary tool's Organization plan pays around $3,960/year in seats alone.

The same team on DANIAN pays €108/year — same software category, two orders of magnitude difference in tool spend.
Government design teams answer to procurement rules that prefer open standards and source-available tools.

Penpot is Mozilla Public License 2.0, recognised as a Digital Public Good, and is the design tool the French government's Beta.gouv team uses for the official dsfr design system — they maintain betagouv/figpot, a public CLI that mirrors Figma libraries into Penpot for civic services.

A typical DANIAN configuration for a public-sector tenant: single-tenant instance in the agency's chosen region, OIDC against the institutional identity provider, telemetry disabled (PENPOT_TELEMETRY=false), encrypted asset bucket.

The portable .penpot files satisfy long-term archival requirements that proprietary binary formats don't — a service design today is still readable in ten years.

Tool spend tracks the budget reality of public-sector procurement: €9/app/month, no per-seat ladder, no minimum-user contract.
In sectors where customer-facing screens often render sample data that resembles real personal data, design files become an audit surface.

The question is not which framework name is on the box; it is whether the company can describe where each file lives, who accessed it, and who the data processor is.

DANIAN gives a regulated tenant a dedicated Penpot instance in their chosen region, registration disabled, OIDC against the company's identity provider, asset bucket encrypted at rest, and a contract that names the sub-processor list explicitly.

The instance is single-tenant — no shared database, no shared object store.

For internal audit, the value of an open-source design tool is that the codebase is inspectable: 22,000+ commits, 47,500+ GitHub stars, MPL-2.0 license.

The auditor can read what the software actually does, not what a SaaS terms-of-service says it does.
Design programs need persistent workspaces that survive across semesters, isolated cohorts (so one class's work doesn't leak to another's), and a way for students to take their portfolio home after graduation that doesn't require a paid subscription to the dominant proprietary tool.

Penpot fits cleanly: the free hosted tier exists, the desktop app is offline-capable, and the .penpot package format is portable.

DANIAN's typical education configuration is one Penpot app per academic year in the institution's chosen region, LDAP or SAML against the campus directory, telemetry off, and shared template libraries pre-seeded by the program.

Penpot publishes a free UI Design Course on penpot.app/courses/ that programs can fold into curriculum without licensing friction.

A two-semester program at €9/month total: €108/year, regardless of cohort size.

FAQ

Frequently asked questions

Everything teams ask before signing up — answered straight, without sales speak.

Three groups: technical setup, migration, and how DANIAN works as a service.

01

Technical and configuration

We always run the latest stable version. We watch the Penpot release feed and the GitHub develop branch, schedule upgrades during off-peak hours for the customer's region, and read release notes before a major bump. Variable renames like the 2.11.0 storage backend rename (PENPOT_ASSETS_STORAGE_BACKENDPENPOT_OBJECTS_STORAGE_BACKEND) are exactly the kind of break a managed service should absorb for you.
Yes. Real-time presence and live editing depend on the /ws/notifications WebSocket channel being properly proxied with Upgrade and Connection: upgrade headers. We configure that at the reverse proxy by default, with client_max_body_size matched to PENPOT_HTTP_SERVER_MAX_BODY_SIZE so large library imports don't fail with opaque 413 errors. Multi-cursor presence, comments, and history work across browsers and the Penpot Desktop Electron app.
Yes, that's the default. We ship Penpot with PENPOT_REGISTRATION_ENABLED=false so the only way into the instance is via an invite or via OIDC or LDAP. Most customers leave it that way. Some run education or community instances where open registration matters, and we flip the flag for those.
We raise PENPOT_HTTP_SERVER_MAX_BODY_SIZE and the matching reverse-proxy client_max_body_size to handle library imports from existing Figma files via the community Penpot Exporter plugin. The practical ceiling depends on source file complexity — very large component libraries can take several minutes to process. If something fails opaquely, send the file and the export log to support and we'll trace it.

02

Migration and onboarding

We can activate your app on your own custom domain/subdomain. Examples: mydomain.com, anyword.mydomain.com.
Or, on our randomized free subdomain. Example: 963.apps.danian.cloud
If you wish to use a custom domain/subdomain, select that option when ordering your app (or notify us later). We will send you the required DNS records and if needed, our tech team will modify them for you.
21 datacenter locations across six continents. You choose the region at provisioning. Application data sits in the region you choose; pick whichever is closest to your users or matches your data-residency preference.
Yes. Request a region migration from the dashboard and we run the move in the background. The system emails you when the migration completes; total transfer time depends on data volume but typical instances finish in a few hours. There is no extra charge for a region change.
Yes. Full data export is available at any time, in a portable format you can bring to any infrastructure.
Partially. There is no direct .fig import inside Penpot. The community-maintained Penpot Exporter Figma plugin runs inside Figma and emits a .penpot package; the French government's betagouv/figpot CLI does the same job for batch syncing. Both work well for typical files and struggle with heavy component libraries and complex prototyping interactions. Expect manual cleanup on large design systems.
No. Migration is one-way. The exchange format inside Penpot is the open .penpot package; underneath that, every layer is real SVG, CSS, and HTML, which you can extract via the Inspect tab or the API. Round-tripping into a proprietary binary format is not on the Penpot upstream roadmap.

03

Billing, support, and platform

€9 covers everything we do for that app: hardware in the region you choose, daily off-site backups with one-click restore, automatic security patches and version upgrades, 24/7 monitoring, SSL and firewall, and engineering support on Email/LiveChat. There are no setup fees or hidden line items. For more info see our Pricing page.
If you decide to continue, we charge €9/app/month from day 8. If you don't, the trial ends and you can export your data. No card is required for the trial, and we never auto-charge you without explicit consent.
No. The €9/month is flat regardless of how many users log into your app. Add 5 users or 50; the price doesn't change.
24/7 Live chat and email support, both staffed by engineers who run the systems. We handle DNS configuration, SMTP setup, app integrations, performance tuning, troubleshooting, and migration help. Response time is typically under an hour. There is no tier system — every customer gets the same support.
Yes. Cancel from the dashboard. We don't charge a cancellation fee, we don't lock data, and we will export your data to you on request before deletion. data to you on request before deletion.
Every customer instance is backed up daily to a separate region from the primary. We test restores. You can request a restore at any backup point within the retention window — usually 7 days for daily backups.
Your application data sits in the region you choose at provisioning — 21 datacenter locations across six continents. Account-level data (billing, account email, support ticket history) is processed centrally. Application data region is picked by you, per app.
99.9% uptime SLA on every app, every tenant. Service credits are documented at danian.co/service-level-agreement. The status page is located at status.danian.co.
When your tenant approaches the resource ceiling — the base tier holds 1 vCPU/RAM, 30 GB storage — we notify you. Resource upgrades happen with your explicit consent; we will not upgrade your tenant or charge you without it.
We wait. We don't suspend the app or delete your data on the first failed charge. We email you, you fix the card on file, and we continue.
Invoices can be downloaded from the billing dashboard in PDF the day each charge succeeds. EU VAT is added where applicable and the VAT-reverse-charge regime applies for VAT-registered businesses with a valid number.
150+ open-source apps across automation, team chat, file sync, analytics, AI, password management, email marketing, dev tools, project management, smart home, CMS, and federated social. See the full catalog →
Yes. Every instance comes with a web-based terminal and a file manager in your DANIAN management dashboard. Useful for managing your data and customizations.
Resources scale with your usage. If your app needs more vCPU, RAM, or storage, we add it — and we ask first before any change to your plan. €9 is the floor; resource-heavy workloads may price higher, but you'll always know in advance.
Yes. We have both a Partner program and an Affiliate program available. Anybody can sign up.
No contract. No minimum commitment. Cancel anytime from the dashboard with one click. The 7-day free trial requires no credit card. After the trial converts to paid, you can still cancel at any month without notice or penalty.

DEPLOY IN YOUR REGION

21 datacenter locations on six continents

Pick the region closest to your users.

United States, Germany, Finland, Singapore, Australia, Brazil, Canada, Netherlands, UK, Spain, Italy, France, Sweden, Malaysia, India, Japan, Mexico, Poland, South Korea, Chile, South Africa and more coming soon

Global Reach Map

Try managed Penpot for 7 days

No card. Cancel from the dashboard.