The open-source, S3-native file hosting platform. Free to self-host. One-click deploy to Cloudflare. Image hosting, file sharing, and backup — all in one.
ZPan is a lightweight file hosting platform built on S3-compatible storage. Not a full cloud drive (Cloudreve), not a storage aggregator (Alist).
Three scenarios, one platform:
- Image Hosting — Upload via PicGo / uPic / ShareX / API, get a permanent URL on your own domain
- File Sharing — Upload, generate a link, distribute
- File Backup & Sync — CLI agent syncs local directories to S3/R2
- Developers and bloggers who need a reliable image bed
- Indie devs / small teams distributing files and releases
- Screenshot workflow users (ShareX, Flameshot, PicGo)
- NAS / desktop users who want off-site backup to S3
- Self-hosters who want a web UI for their S3 buckets
Each version ships 1–2 major features. Ship small, ship often.
| Version | Focus | Details |
|---|---|---|
| v2.0 | Foundation | File management + basic auth + dual deployment |
| v2.1 | Auth & Access | Social login, OIDC, invite codes, registration controls |
| v2.2 | Teams | Team workspaces, shared folders, member roles |
| v2.3 | Sharing | Share links, direct links, password / expiration / limits |
| v2.4 | Image Hosting | Upload API, PicGo / uPic / ShareX integration, custom domain |
| v2.5 | Multi-Platform Deployment | 7 first-class targets via Turso (CF, Docker, AWS Lambda, Vercel, Netlify, Azure, GCP); avatar upload |
| v2.6 | Pro Launch | Cloud binding, entitlement system, quota store, white-label, audit log, site announcements, retroactive Pro gates |
| v2.7 | WebDAV & File Processing | WebDAV protocol access, small-file zip compression/extraction, and Community remote-download orchestration through Aria2, qBittorrent, and future adapters |
| v2.8 | Pro Analytics & Identity | Analytics dashboard, SSO enterprise (multi-IdP OIDC + SAML), LDAP / SCIM |
| v2.9 | Backup | zpan-cli (Rust) one-way backup for NAS / desktop |
| v2.10 | Sync & Desktop | Bidirectional sync + Tauri desktop tray app |
Managed cloud services (large archive processing, content moderation, server-side media processing, managed custom domains) live in a separate closed-source repo and version independently. They are consumed by ZPan via HTTP, and do not affect self-hosted deployments that don't opt in. Remote download is not a Cloud execution service; ZPan integrates with user-owned download engines instead.
v2.0–v2.4 ship on two runtimes. v2.5 expands to seven.
- Cloudflare Workers — Zero-ops, free tier covers personal use, one-click deploy (all versions)
- Docker — Self-hosted, bring your own S3, full control (all versions)
- AWS Lambda — For teams on AWS; SAM template + GitHub Actions workflow (docs) (v2.5+)
- Vercel — One-click "Deploy to Vercel" via GitHub (v2.5+)
- Netlify — One-click "Deploy to Netlify" (v2.5+)
- Azure Functions — Bicep template; for Azure-mandated environments (v2.5+)
- Google Cloud Run — Container-based; reuses the Docker image (v2.5+)
Same codebase, same features, seven runtimes. Turso provides the database for every non-CF target (9 GB free tier, no credit card). Object storage is decoupled — users bring any S3-compatible bucket (R2, S3, B2, Tigris), which is what makes Azure and GCP viable targets without adapting to their non-S3 native blob stores.
ZPan is split into two editions. Both run the same open-source codebase — Pro features are unlocked through ZPan Cloud account binding, Managed is Pro operated by us.
Everything an individual, family, or small team needs to self-host:
- File management, upload, download, browse, search
- Personal account + social login + basic OIDC (single IdP)
- Share links + password + expiration + download limits
- Image hosting API + PicGo / uPic / ShareX + custom domain
- WebDAV access for external file managers and sync tools
- One personal workspace plus one extra team workspace, shared folders, and basic roles
- Small-file zip compression and extraction within local runtime limits
- Remote-download orchestration through user-configured Aria2, qBittorrent, and future compatible adapters
- Backup CLI + desktop app + bidirectional sync
- All 7 deployment targets
No basic personal file workflows are gated behind paywalls. Operator controls and hosted compute-heavy workflows are Pro because they carry operational cost or platform-abuse risk.
Operator-grade features for running ZPan as a service (internally at a company, publicly as a product, or commercially for customers). The rule of thumb: features that help you use ZPan are free; features that help you operate ZPan for others are Pro.
- Open registration (the public signup mode) + anti-abuse tooling (captcha, rate limit, email verification)
- Audit logs + site announcements + webhook notifications + analytics dashboard
- White-label (logo / favicon / wordmark / custom branding)
- Large archive processing and future server-side media/document processing
- SSO enterprise (multi-IdP OIDC + SAML), LDAP / SCIM provisioning
- Advanced RBAC / custom roles, retention policies
- Admin impersonation, per-user quotas, multi-tenant isolation
Pro is one product with two delivery modes:
- Self-hosted Pro — buy a license, run ZPan yourself. The instance binds to ZPan Cloud for Pro entitlement and verifies the issued certificate locally.
- Managed Pro — same features, we operate the ZPan instance and storage. You stop caring about ops.
Pro is purchased or redeemed on ZPan Cloud, then mirrored to a bound ZPan instance by signed entitlement certificates. See v2.6 for the launch plan.
Retroactive gates. A small number of features shipped in v2.0–v2.5 are operator-grade and become Pro-only starting in v2.6: open registration mode (from v2.1), teams beyond the included extra team (from v2.2), and storage backends beyond the free limit. Closed / invite-only registration, single-IdP OIDC, all sharing and image-hosting features, all small-file archive processing, and all deployment targets remain Community. See v2.6 for the complete list.
A small set of Pro features depend on backend infrastructure we host: large archive processing, content moderation (third-party NSFW scanning), server-side media/document processing, and managed custom domains (SSL provisioning). Those services live in a separate closed-source repo (zpan-cloud) and version independently. Self-hosted Pro users call these services via HTTPS; usage included up to a monthly quota per plan, post-included usage paid with unitless ZPan Cloud credits. Stripe subscriptions remain normal USD subscriptions; ZPan only receives entitlements and usage accept/reject decisions. Cloud does not run remote-download workers in the v2.7 plan.
Initial pricing target: a single Pro SKU with generous monthly quotas covering ~90% of users. Tiered plans (Team, Business) follow once Pro validates. Full pricing is in v2.6.
See each version document for the specific issues resolved.