Kubernetes Dashboard Alternatives Compared (2026): Access, Control, AI and Cost

Most “best Kubernetes dashboard” lists rank tools by features. The better question is which tool fits how your team signs in, what you let it change, and what it costs to keep. Since the official Kubernetes Dashboard was archived, those questions matter more, because you are choosing a replacement you will live with.

This comparison is organised around those questions instead of a feature checklist. Everything was read from each project’s repository, documentation or pricing page on 21 October 2026, and where we did not verify something the table says so. We make Berth, one of the tools below, so we say where it falls short, and we did not run any competitor’s software for this piece. If you are leaving the Dashboard, the migration guide has the commands.

The tools

Tool	Form	Licence and cost	Last release or status
Headlamp	In-cluster web, or desktop	Apache-2.0, free	v0.46.0, 15 Oct 2026
Freelens	Desktop (macOS, Windows, Linux)	MIT, free	v1.10.3, 7 Jul 2026
Lens	Desktop	Proprietary. Free Personal tier, paid tiers above it	Commercial product
k9s	Terminal	Apache-2.0, free	v0.51.0, 6 Jun 2026
Portainer	Web	Community Edition frozen on 2.45 LTS. 3.x is closed-source Business Edition, with a “3 Nodes Free” license	Active
Berth	In-cluster web, or local binary	Proprietary. Viewing and up to 10 nodes free	Restricted beta, v0.5.0

The archived Kubernetes Dashboard (last push 21 January 2026), Octant (archived 19 January 2023) and Skooner (no pushes since 30 June 2024) are left out of the rest of this article because we would not start a new installation with any of them.

How do people sign in?

This decides who can do what, so check it before the features.

• Headlamp uses a Kubernetes service account token or OIDC. Its installation documentation says you enable access by creating a service account or setting up OIDC, and has tutorials for Dex, Keycloak, Cognito, Entra ID and others. Its README says the interface reflects user roles, so a person who cannot delete something is not offered the button.
• k9s runs on your machine and uses your own kubeconfig, so access follows the permissions of whoever is at the keyboard.
• Berth uses a bearer token (the default, generated by the Helm chart) or a trusted proxy header. Everyone who signs in shares the permissions of the account Berth runs as. There is no SSO and no per-user authorization.
• Freelens, Lens, Portainer: we did not check how each handles credentials. Desktop apps run on your machine, and you should confirm what they store.

If you have more than one operator and need to know who did what, sign-in is the main reason to pick Headlamp (OIDC) over a shared token.

What can each one change?

A dashboard is a way to act on your cluster, not only to look at it.

• Headlamp describes itself as read-write and interactive, with actions that depend on permissions. What it can change is whatever the signed-in identity can change in Kubernetes.
• k9s has a --readonly flag that disables all cluster modification commands. That is a simple, useful way to hand someone a view without write access.
• Berth lets anyone with the dashboard token make changes only if a license key is applied (viewing is always free and needs no key). It shares one identity for all users, so scope the account it runs as accordingly.
• Freelens, Lens, Portainer: not checked.

A useful rule for any of them: give the tool the narrowest role that covers what your team actually does, and treat the sample “admin” bindings in setup guides as examples to shrink, not to copy. Several popular guides, including the Kubernetes Dashboard’s own and Headlamp’s example, bind the account to cluster-admin.

What do the AI features do, and where does the data go?

Several of these now include an AI assistant, and the differences matter more than the feature name.

• Headlamp: the AI Assistant is a plugin you configure with your own API keys. According to Headlamp’s announcement it can also be action-oriented, taking steps such as restarting a deployment with your permission.
• Lens: we did not verify its AI features for this update, so check its pricing page.
• Berth: the assistant’s tools are read-only, so it can investigate and propose a fix but cannot apply one. Community use is on your own Ollama server, so data stays in your network. Enterprise adds Claude through Anthropic or Amazon Bedrock on your own key, in which case the conversation and tool results go to that provider. Berth is a restricted beta. Its evaluation page reports a scored run on 17 synthetic scenarios and says plainly that it does not measure diagnostic accuracy on real clusters, so treat any AI diagnosis as a lead to check, not an answer.
• k9s, Freelens, Portainer: we did not find or check an AI feature.

Whichever you choose, ask three questions: can it change anything, where does the text go, and who pays for the model. There is no universally right answer. Some teams want an assistant that can act, and some want one that cannot.

What does it cost?

• Free and open source: Headlamp (Apache-2.0), Freelens (MIT) and k9s (Apache-2.0). k9s’s README asks for donations and says it will always remain open source.
• Lens: Personal is free for students, hobbyists and engineers at small organisations. Organisations with more than $10 million in annual revenue or funding need a paid subscription. For individuals, Plus is $25 a month on annual billing ($30 monthly). For organisations, Pro is $25 per seat a month on annual billing and Enterprise is $50 per seat.
• Portainer: per coverage of its announcement, Community Edition stays on 2.45 LTS and new work goes to a closed-source Business Edition. The free route onto 3.x is “3 Nodes Free.”
• Berth: free to view, and a free Community key covers changes on up to 10 nodes in a single cluster. Enterprise has no public price, and the node allowance is agreed per deployment.

Prices and terms change, so confirm them on the vendor’s page before you decide.

Is it maintained?

Look at release dates, not star counts.

• Headlamp, Freelens and k9s all had releases this year and pushes within the last week or so of the check.
• Headlamp lives under Kubernetes SIGs (kubernetes-sigs/headlamp), and the Kubernetes project’s own documentation now points to it.
• Berth is young. Its latest release is v0.5.0 and its own site calls it a restricted beta, so weigh that against the problem it solves for you.
• Portainer is active, but its free edition’s roadmap has narrowed, as above.

A 30-minute bake-off

Pick two candidates and run the same short list against a non-production cluster:

1. Sign in the way your team would, and note how many steps it took.
2. Find a crash-looping pod and read its logs and events.
3. Find the single-replica workloads in a namespace.
4. Try a write (a rollout restart) with your intended role. Then try one that role should not allow, and see what the tool shows.
5. Check where the data goes if you turn on an AI feature: what is sent, to whom, and with what permission to act.
6. Remove it. A tool you cannot cleanly uninstall is a liability.

The tool that handles steps 1, 4 and 5 the way your security person expects is usually the right one. The rest is taste.

Where Berth fits, and where it does not

Berth is aimed at one case: a small team with a single cluster that mostly troubleshoots endpoints and capacity. It shows the chain from hostname through DNS, TLS, Gateway, route and service to backend pods and names the first broken link, groups capacity by node pool with the binding constraint, and has a read-only assistant. It has no SSO, no per-user authorization, no audit viewer and no multi-cluster management, it runs as a single replica, and it is a restricted beta. If you need any of those, choose Headlamp. The Berth overview has the details.

Sources

Read on 21 October 2026: the repositories and READMEs for Headlamp, Freelens, k9s, Skooner, Octant and the archived Kubernetes Dashboard (status, licence and release dates through the GitHub API); Headlamp’s installation documentation and its AI Assistant announcement of 7 August 2025; the Lens pricing page; coverage of Portainer’s Community Edition announcement at itsfoss.com; Berth’s documentation. Cells and sections marked “not checked” were not verified. We did not run any competitor’s software. If we have something wrong, tell us and we will correct it with a dated note.