How CashPilot compares¶

This page compares CashPilot with the other open projects that run several passive income apps in Docker. We checked every project on 2026-11-04. Each cell about another project links to the file it comes from, at a fixed commit, so you can check it yourself. If a cell is wrong or out of date, please open an issue.

Projects compared¶

money4band has two code lines. Its default branch main (3bfafb1) still holds the 4.x code, and its last code change there was on 2026-03-03. Release 5.0.0 is built from a separate history. We compare 5.0.0 because that is what its latest release ships.

IGM's web UI, fleet management and installer binary are closed source and not in its repository. Where a cell depends on them, it says "README claims" and links the README line. Everything else in IGM's column comes from the shell scripts and compose files in the repo.

Left out: earning-machine and passiveMachine have had no commits since 2024. A GitHub search found nothing else maintained that runs more than one app, only single-app images.

Short version¶

• InternetIncome, money4band, IGM and, since v1.69.0, CashPilot can earn on many IPs through proxies. The first three run each app once per proxy, and proxies are InternetIncome's main feature. CashPilot runs extra copies of a service already deployed on a worker, each through a SOCKS5, HTTP CONNECT or Tailscale exit-node proxy (proxied copies).
• InternetIncome (23) and IGM (20) start more apps than CashPilot's worker (17). CashPilot tracks more services in total (42) because it also follows browser extension, desktop and GPU services that it does not run. Since v1.64.0 it can also run any image you name as a custom service.
• money4band and IGM claim daily rewards for you, and keep app images updated with Watchtower. CashPilot does neither. It pulls an image again only when you deploy or redeploy.
• CashPilot is the only one here that reads balances from your provider accounts and keeps a history. money4band 5.0.0 shows estimates from its own catalog, not your accounts. The others link to each provider's dashboard.
• CashPilot is the only open-source one here with one UI for many servers. IGM's README claims fleet management, but that code is in its closed binary.
• Since v1.70.0, CashPilot is the only one here that keeps earner containers off your LAN by default, with limits. It is on for new installs and for upgraded installs with no earner on Docker's default bridge. An upgraded install whose earners already sit on that bridge keeps them there until you turn isolation on, a network you name in CASHPILOT_CONTAINER_NETWORK gets no fence from CashPilot, and host-networked Mysterium is never fenced (isolation).

Side by side¶

CashPilot's column describes v1.64.0, except the proxy, Docker socket and LAN isolation rows, which describe v1.71.1 (0170dee, 2026-11-06), and Mysterium's network in the container settings row, which describes the release after 2.0.6 (01e7310). The other columns describe the commits in the table above.

None of the projects sends usage telemetry in the code we read. IGM's closed binary could not be read.

Every project here passes app credentials to containers as environment variables, and InternetIncome passes some as command arguments too, so on the host that runs the apps they are plain text in Docker's container config (Env and Args in docker inspect), readable by anyone with Docker access. The "Credentials at rest" row describes the stored copy only.

How we counted¶

• CashPilot. Services in the catalog with status active or beta and a Docker image, not counting GPU compute. The number on this page comes from scripts/generate_readme_tables.py, and CI fails if it drifts.
• money4band 5.0.0. One JSON file per app in config/catalog/supported/: 15. The README's "35 apps" also counts the community catalog, which is off by default (config), apps with no Docker image, and dropped apps.
• IGM. Entries in apps.json: 20, all enabled. The proxy container, Watchtower and the claim sidecars are not counted.
• InternetIncome. Each # Starting ... container comment block in internetIncome.sh, other than the proxy and Watchtower blocks: 24. Ebesucher's Chrome and Firefox blocks are one app, and so are EarnFM and EarnFM Fleetshare, which use the same EarnFM account. The Depin extensions block starts Grass and Gradient (script), two apps. Total 23. The README table lists 27 apps, some with a signup link only.
• CashFactory. Earning services in docker-compose.yml: 11. Portainer, the web server and the two Watchtowers are not counted. One service is commented out.
• HA add-ons. Add-on folders with a config file: 10.

We did not check whether each app on each list still pays out.

Where CashPilot is behind¶

• Services that need host networking, published ports, volumes, devices or extra network capabilities cannot run through a proxy, so 8 of the 17 (EarnApp, URnetwork, ProxyBase Markets, Bitping, Mysterium, Storj, Sia and Anyone Protocol) earn only from the server's own IP (proxied copies).
• Fewer apps that it starts itself than IGM or InternetIncome.
• No daily reward claiming and no automatic image updates.
• 13 of the 17 earner images float on their publisher's latest tag.
• The socket proxy is not yet a root boundary: a compromised worker can still create containers within its policy, and two-step escapes (joining another container's process namespace, a symlink in an allowed folder) are not refused (details).
• The encryption key for stored credentials sits in the same volume as the data, and on each worker the earner credentials are plain text in Docker's container config.
• Some collectors need a cookie or token copied from the browser, and some of those expire, so earnings tracking needs upkeep for those services.
• The UI loads fonts and Chart.js from third-party CDNs.
• LAN isolation stays off on an upgraded install whose earners sit on Docker's default bridge until you turn it on, it gives no fence to a network named in CASHPILOT_CONTAINER_NETWORK, and it never covers host-networked Mysterium (isolation).
• A much smaller community than money4band's.
• It releases often, sometimes several times a day.