Short version: Pelican is the future. Pterodactyl is the present. Pelican forked Pterodactyl in mid-2024 after Wings went 20 months without a release, and it now ships features and security patches faster than the upstream. But Pterodactyl Wings finally returned with v1.12.1 in January 2026, the panel got v1.12.2 in March 2026, and the project is no longer drifting. So the real question isn't "is Pterodactyl dead?" — it isn't. The real question is which one fits your situation in 2026.
Pterodactyl Panel v1.12.2 (2026-03-26) · Pterodactyl Wings v1.12.1 (2026-01-13) · Pelican Panel v1.0.0-beta33 (2026-02-18) · Pelican Wings v1.0.0-beta24 (2026-02-15). All four checked live against GitHub Releases the day this guide was published.
01 // The 60-second answer
Skip the rest of this guide if you just want to know which one to install. Pick the row that matches you:
| Your situation | What I'd actually install |
|---|---|
| Greenfield install in 2026, hobbyist or small community, single VPS | Pelican. Faster install, modern Livewire/Filament UI, active development, friendlier error messages. The beta tag is real but realistic for non-paying users. |
| Already running Pterodactyl, no specific pain | Stay on Pterodactyl. Apply the 2026 security patches, keep your eggs, save the migration weekend for something else. The panel works. |
| Hosting business with WHMCS billing or Paymenter integration | Pterodactyl, for now. WHMCS Pterodactyl module is mature; Pelican equivalents are still maturing. Re-evaluate when Pelican v1.0.0 stable ships. |
| Multi-tenant deployment with paying customers and an SLA | Pterodactyl. The word beta in your stack and a paying customer are a bad mix in writing. |
| Trying both fresh on a test VPS to decide | Install Pelican first. It's a faster install, the UI is more pleasant, and if you bounce off it Pterodactyl is still there. |
| Need Windows host support | Neither. Both panels run their Wings daemon on Linux only. See AMP or WindowsGSM. |
Want the reasoning? Keep reading. The rest of this guide walks through the 2024-2026 timeline that shaped this decision, what's actually different between the two panels, the published security advisories on both projects, and a concrete migration walkthrough if you decide to switch.
02 // The 2024-2026 timeline that changed everything
To understand why this comparison even exists you need the timeline. Every date below is verifiable on GitHub Releases.
| Date | Event | Why it matters |
|---|---|---|
| 2018–2023 | Pterodactyl golden era | Dane Everitt and a small core team ship steady releases. Panel becomes the de-facto standard for game-server hosting businesses worldwide. |
| Late 2023 | Maintainer step-back | Public commits slow. Issues sit unanswered for months. Community starts asking out loud whether the project is still alive. |
| 2024-05-08 | Wings v1.11.13 ships | The last Wings release before a long gap. Nobody knew it at the time, but Wings would not see another release for 20 months. |
| Mid-2024 | Pelican fork goes public | A group of contributors fork the panel under pelican-dev/panel. Goal: keep development moving and modernise the stack (Filament admin, Livewire reactivity, modern PHP). |
| 2025 | Pelican rapid iteration | Pelican ships beta after beta through 2025. Adoption grows in r/pterodactyl and the official Discord. Hosting providers begin testing it on staging fleets. |
| 2025-06-19 | Pterodactyl RCE advisory | GHSA-24wv-6c99-f843 published — unauthenticated arbitrary remote code execution in the panel, severity critical. The patch lands, but the fact that this came out during the perceived silence shook a lot of administrators. |
| 2025-08-22 | Pelican advisory GHSA-v97c-v3vw-p5ff | Low-severity node token cross-node access bug. Patched. Establishes that the fork has its own real security surface to monitor. |
| 2026-01-13 | Pterodactyl Wings v1.12.1 ships | First Wings release in 20 months, ending the silence. The "Pterodactyl is dead" narrative dies with it. |
| 2026-02-14 | Pterodactyl critical advisory | GHSA-g7vw-f8p5-c728 — cross-node server configuration disclosure via Remote API missing authorization. Severity critical. Patched in v1.12.x. |
| 2026-02-15 | Pelican Wings v1.0.0-beta24 | Pelican's daemon hits parity features. Multi-node deployments become officially supported on Pelican. |
| 2026-02-18 | Pelican v1.0.0-beta33 | Current Pelican panel release. Still tagged beta — that tag matters for paid hosting but is functional for hobby and small-community deployments. |
| 2026-03-11 | Pelican high-severity advisory | GHSA-6m5v-p3cc-pm9h — RCE via arbitrary file write in server icon URL upload (Livewire Hidden field bypass). Patched. The lesson: Pelican has fast development but also a security surface that needs the same patch discipline as upstream. |
| 2026-03-26 | Pterodactyl Panel v1.12.2 | Current Pterodactyl panel release. Maintenance mode is real, not hospice care. |
What this timeline actually proves
Three things that no top-10 SERP result for "pterodactyl vs pelican" currently states clearly:
- Pterodactyl is not abandoned. The 20-month Wings gap was real, but it ended in January 2026 and a fresh panel release landed in March. Anyone telling you to migrate because Pterodactyl is dead is repeating mid-2025 information.
- Pelican is not just a refresh. It's a parallel codebase with its own release cadence, its own security advisories, and its own roadmap. Treating it as "Pterodactyl with a fresh coat of paint" understates what changed under the hood (Filament admin, Livewire reactivity, PHP 8.2+ baseline).
- Both projects ship security patches on a similar cadence in 2026. Pterodactyl had a critical and a high in February; Pelican had a high in March. The advantage isn't "Pelican is more secure" — the advantage is that both are now being actively patched, which is the bar that matters.
Pelican is the future of this ecosystem. Pterodactyl is the present. Most of the internet still runs on Pterodactyl in 2026, and that's not going to flip overnight just because there's a friendlier fork available.
03 // Are they actually the same software underneath?
Mostly yes, with meaningful divergence growing every release. Let's break it down honestly.
What's identical or near-identical
- Wings daemon architecture. Both panels speak to a Go-based daemon (Wings) that drives Docker on each game-server node. The wire protocol is shared, which is why people can in some cases swap their Wings binary between projects without touching
config.yml. Don't actually do that in production — the panels expect their own daemon — but it tells you how close the architectures are. - Egg JSON format. An egg is the JSON definition of a game (start command, config files, install script). Pelican retains the exact same egg schema. Eggs from
pterodactyl/yolks,parker, andpelican-eggsimport into either panel. This single decision is what made the fork practical. - Database model. Schema-level differences exist, but the entity model (users, servers, nodes, allocations, eggs, mounts) is essentially the same. This is why a migration path is even possible.
- Docker-as-the-runtime. Both panels orchestrate Docker containers on Wings nodes. SFTP is provided by Wings using port 2022 by convention. Console streaming uses WebSockets the same way.
- Allocation/port model. IP + port pairs assigned to servers, with primary and secondary allocations. Identical concept and identical UX in the panel.
What's meaningfully different
- Admin UI framework. Pterodactyl admin uses a hand-rolled Blade-templated admin area. Pelican rebuilt it on Filament, which gives you searchable resource tables, inline editing, bulk actions and a much faster feedback loop when you're managing dozens of servers. This is the single biggest day-to-day difference for an admin.
- Frontend reactivity. Pterodactyl client area is a React SPA. Pelican uses Livewire for many client interactions, which means slightly snappier perceived performance for small actions (start/stop, file ops) and a lighter JS payload.
- PHP version baseline. Pterodactyl supports PHP 8.1+. Pelican requires PHP 8.2+ (8.3 recommended). Trivial on a fresh install, occasionally annoying if you're sharing a host with legacy PHP applications.
- Installer experience. Pelican ships a guided web installer. Pterodactyl is still the classic
git clone+composer install+php artisan p:environment:setupflow. The difference is “15 minutes vs 25 minutes” on a new VPS. - Default theme. Pelican ships with a more modern default look out of the box. Pterodactyl ships looking like 2019. You can theme either panel; this just affects what your customers see on day one.
- Settings storage. Pelican stores more configuration in the database (editable in admin UI) where Pterodactyl uses
.envfor the same things. Operationally this means fewer SSH sessions for routine config changes on Pelican. - API surface. The public/application APIs are very similar but not bit-for-bit compatible. If you have custom tooling against the Pterodactyl API, expect to update endpoint paths and a few payload shapes when migrating.
04 // Interactive: which one should you actually pick?
Four questions, one verdict. Answers stay on this page — nothing is sent anywhere.
Disagree with the verdict? It's a heuristic, not gospel. Use it as a sanity check, then read the rest of this guide for the reasoning.
05 // The decision tree, in plain English
If you didn't use the wizard, here's the same logic in prose. Read top-to-bottom and stop at the first row that matches you.
Pick Pterodactyl if any of these apply
- You already run Pterodactyl in production. Don't migrate just because of internet hype. The fork solves problems you may not have. Patch your panel, follow the security advisories, and revisit this in 6 months.
- You need WHMCS billing integration today. The Pterodactyl WHMCS module has years of production use. The Pelican-side ecosystem is catching up but not parity.
- You sell game-server hosting to paying customers and your contract / TOS / customers cannot tolerate beta-tagged software touching their data.
- You need maximum third-party tooling compatibility. Most existing add-ons, themes, and integrations target Pterodactyl. Pelican parity is improving but not 1:1.
- Stability over novelty is a hard requirement — e.g. internal company use, school IT, public-sector deployment.
Pick Pelican if any of these apply
- This is a brand-new install and you have no migration cost to weigh against the upside.
- You'll be in the panel admin area frequently. The Filament-based admin UI is materially better than Pterodactyl's hand-rolled Blade pages for day-to-day fleet management.
- You're hobby / friends / small community and you don't need WHMCS billing.
- You want the active development pace. Pelican ships releases on a measured-in-weeks cadence; Pterodactyl ships on a measured-in-months cadence in 2026.
- You can patch quickly when an advisory drops. Pelican is in beta and security issues are still being found and fixed (e.g. GHSA-6m5v-p3cc-pm9h in March 2026). If you're not the kind of admin who patches within 24 hours of a critical advisory, this is a real risk.
Pick neither if any of these apply
- Your Wings host needs to run on Windows. Both panels require Linux for Wings. Look at AMP by CubeCoders (Windows + Linux) or WindowsGSM (Windows only, free).
- You only need one game server, no multi-tenant, no panel for friends. LinuxGSM or a plain systemd service is lighter weight.
- You don't want to run a panel at all. Plenty of one-click managed hosts exist — check our reviews for honest comparisons.
In 2026 there is no wrong choice between these two panels. The wrong choice is running an unpatched version of either — both projects shipped critical advisories this year. Pick one, set up alerts on the GitHub Security Advisories feed, and patch when they ship. That matters more than which panel you picked.
06 // Feature-by-feature comparison
This is the long version of the verdict matrix. Every row reflects state as of April 2026 on Pterodactyl Panel v1.12.2 / Wings v1.12.x and Pelican Panel v1.0.0-beta33 / Wings v1.0.0-beta24.
| Feature | Pterodactyl 1.12.2 | Pelican 1.0.0-beta33 |
|---|---|---|
| Release status | Stable | Beta — functional but tagged beta until 1.0.0 stable ships |
| Release cadence (2026) | Months between releases — maintenance pace | Weeks between betas — active development pace |
| PHP requirement | 8.1 minimum, 8.3 recommended | 8.2 minimum, 8.3 recommended |
| Database | MariaDB 10.5+ / MySQL 8.0+ | MariaDB 10.5+ / MySQL 8.0+ / SQLite (single-node) |
| Cache layer | Redis required | Redis recommended, file/database fallback supported |
| Web server | Nginx (recommended) or Apache | Nginx, Apache, Caddy — all documented |
| Admin UI framework | Hand-rolled Blade templates | Filament (searchable resource tables, bulk actions, inline edit) |
| Client UI | React SPA | Livewire-driven (lighter JS, slightly snappier small actions) |
| Installer | composer install + artisan commands — ~25 min on a fresh VPS | Web installer wizard — ~15 min on a fresh VPS |
| Eggs (game definitions) | Original ecosystem (pterodactyl/yolks, parker) | Same JSON format — imports Pterodactyl eggs unchanged |
| Multi-node support | Yes — mature, used by major hosts | Yes — supported officially since Wings beta24 (Feb 2026) |
| WHMCS billing module | Mature, widely deployed in production | Pelican-WHMCS exists; Paymenter as alternative; less battle-tested |
| Two-factor auth | TOTP, optional WebAuthn | TOTP, WebAuthn, optional passwordless flows |
| OAuth / SSO | Limited; via third-party plugins | Discord, Steam, GitHub built in; OIDC plugin available |
| Theme ecosystem | Large (Pterodactyl Market, Blueprint addons) | Smaller but growing; modern default looks good out of the box |
| Public API stability | Stable, widely integrated | In flux; expect endpoint changes between betas |
| Documentation | Comprehensive but parts feel dated | Rebuilt, modern, but some pages are still placeholders |
| Security advisory feed | GitHub Security Advisories on pterodactyl/panel + pterodactyl/wings | GitHub Security Advisories on pelican-dev/panel + pelican-dev/wings |
| Community size (April 2026) | Larger Discord, more historical Reddit content | Smaller but more active in current threads; growing month-over-month |
07 // Security advisories: the data nobody puts in their comparison
This is the section that doesn't exist on any other page comparing these two panels. We pulled the GitHub Security Advisories for both projects and put them in one place. If you administer either panel, this list belongs in your bookmarks.
Pterodactyl — published advisories
| GHSA ID | Date | Severity | Issue |
|---|---|---|---|
| GHSA-g7vw-f8p5-c728 | 2026-02-14 | Critical | Cross-node server configuration disclosure via Remote API missing authorization. Patched in v1.12.x. |
| GHSA-24wv-6c99-f843 | 2025-06-19 | Critical | Unauthenticated arbitrary remote code execution in panel. The big one. Patch immediately if running anything older than the fixed version. |
| GHSA-pjmh-7xfm-r53x | 2024-09 | High | Privilege escalation in subuser API allowed lower-privilege users to perform restricted actions. |
| GHSA-7v5x-r2fm-h32v | 2023-12 | High | SFTP authentication flaw under specific configurations. Wings-side fix. |
Subscribe to advisories: github.com/pterodactyl/panel/security/advisories · github.com/pterodactyl/wings/security/advisories
Pelican — published advisories
| GHSA ID | Date | Severity | Issue |
|---|---|---|---|
| GHSA-6m5v-p3cc-pm9h | 2026-03-11 | High | RCE via arbitrary file write in server icon URL upload. Livewire Hidden field bypass. Patched. |
| GHSA-v97c-v3vw-p5ff | 2025-08-22 | Low | Node tokens granted access across nodes under specific multi-node configurations. Patched. |
Subscribe to advisories: github.com/pelican-dev/panel/security/advisories · github.com/pelican-dev/wings/security/advisories
What this comparison tells you
- Both projects find and ship critical fixes. The 2026 cadence is now similar — both had high or critical issues this year. This is normal for any web panel exposed to the internet.
- Pelican has a smaller advisory history because it's younger, not because it's safer. As adoption grows, expect more issues to be found and disclosed. The Livewire surface area in particular is novel and worth watching.
- Both projects use GitHub Security Advisories — you can subscribe to the four feeds above (panel + wings for each) and get email alerts the moment a new advisory drops.
- The pattern matters more than the count. Both projects publicly disclose issues with patch versions, both projects accept private disclosure via GitHub. That's the bar — and they both clear it.
Whichever panel you pick, the highest ROI security investment is putting it behind a Cloudflare Tunnel so the panel is never directly exposed to the public internet. We cover this step by step in our Pterodactyl security hardening guide — the same pattern works for Pelican.
08 // Migrating from Pterodactyl to Pelican
If you've decided to switch, here's the realistic walkthrough — not the marketing version. Plan for downtime, take a backup, and read the whole section before you touch anything.
Migration is not zero-downtime in practice. Plan for 30-90 minutes of customer-visible downtime depending on your fleet size. The Pelican team has improved migration tooling significantly through 2026, but it's still not a one-click experience for production fleets.
If you have paying customers, schedule it as a maintenance window and announce it 48 hours ahead. Don't try to migrate live during peak hours.
Step 1 — Take a verified backup of everything
Non-negotiable. Three things must be backed up:
# 1. Database dump
mysqldump -u root -p panel > /root/panel-backup-$(date +%F).sql
# 2. Panel files (especially .env, storage, public)
tar -czf /root/panel-files-$(date +%F).tar.gz /var/www/pterodactyl
# 3. Wings configuration on each node
tar -czf /root/wings-$(hostname)-$(date +%F).tar.gz /etc/pterodactyl /var/lib/pterodactyl
Verify the database dump opens cleanly with head -50 /root/panel-backup-*.sql and shows the expected CREATE TABLE statements. A dump file you can't read is not a backup.
Step 2 — Test the migration on a clone first
Spin up a separate VPS, restore your backup there, install Pelican on it, run the migration command, and verify everything works. Only after this rehearsal succeeds do you touch production.
Skip this step at your peril. Several production migration horror stories on r/pterodactyl come down to "I didn't test it on a clone first."
Step 3 — Decide your migration strategy
Three options, in increasing order of complexity:
- In-place upgrade. Replace the Pterodactyl panel files with Pelican on the same VPS, run Pelican's migration commands, point Wings to the new panel. Lowest infrastructure overhead, highest blast radius if something fails.
- Side-by-side then cutover. Install Pelican on a separate VPS, migrate the database, validate, then update Wings configuration on each node to point at the new panel URL. Recommended approach for most.
- Fresh start. Install Pelican fresh, manually re-add nodes, re-import eggs, re-create users. Only practical for small fleets (< 10 servers) where the data isn't worth migrating.
Step 4 — Run the Pelican install + migration
On the new (or same) panel host:
# Pelican uses a guided installer at this URL after first deploy:
# https://your-panel.example.com/installer
# Or via CLI on the panel host:
cd /var/www/pelican
php artisan p:upgrade # validates structure
php artisan p:environment:setup
php artisan migrate --force
php artisan p:import:pterodactyl # if migrating from Pterodactyl backup
php artisan queue:restart
The p:import:pterodactyl command pulls users, servers, nodes, allocations, and eggs from a Pterodactyl-format database. Verify each entity type after import — servers should show up, eggs should show up, allocations should be linked.
Step 5 — Repoint Wings nodes
On each Wings node:
# Stop wings
systemctl stop wings
# Edit /etc/pterodactyl/config.yml
# (Or move it: Pelican expects /etc/pelican/config.yml on newer Wings)
# Update remote URL to point to your new Pelican panel:
# remote: 'https://panel.example.com'
# Token + token_id stay valid if you imported nodes correctly.
# Optional: install the Pelican Wings binary side by side
wget https://github.com/pelican-dev/wings/releases/latest/download/wings_linux_amd64
chmod +x wings_linux_amd64
mv wings_linux_amd64 /usr/local/bin/wings
systemctl start wings
journalctl -u wings -f
Watch journalctl -u wings -f for at least two minutes after starting. Errors will show up here long before they show up in the panel. Common issues: certificate verify failed means SSL on the new panel isn't trusted yet; unauthorized means the node token didn't migrate correctly.
Step 6 — Smoke test before announcing migration complete
- Log in as an admin user — verify the admin area loads.
- Log in as a regular customer — verify the client area loads and lists their servers.
- Start a test server — verify console output streams.
- Connect via SFTP — verify file ops work.
- Restart a server — verify Wings can stop and start cleanly.
- Check the activity log — verify recent events are recorded.
Only after all six pass do you announce the migration is complete.
Rollback plan
If anything goes wrong:
# Stop the Pelican panel
systemctl stop nginx
# Restore the Pterodactyl panel files
tar -xzf /root/panel-files-YYYY-MM-DD.tar.gz -C /
# Restore the database
mysql -u root -p panel < /root/panel-backup-YYYY-MM-DD.sql
# Repoint Wings back to the Pterodactyl panel URL on each node
# (revert the remote: setting in config.yml)
# Restart everything
systemctl restart nginx php8.3-fpm
systemctl restart wings # on each node
This is why Step 1 (verified backup) and Step 2 (clone test) matter. With both done, your worst-case is a 15-minute rollback to a known-good state.
09 // Frequently asked questions
Is Pterodactyl dead in 2026?
No. The 20-month Wings silence ended in January 2026 with v1.12.1, and Panel v1.12.2 shipped in March 2026. Critical advisories are being actively patched. The project is in maintenance mode with active security response, not abandoned. The "Pterodactyl is dead" narrative is repeating mid-2025 information.
Is Pelican stable enough for production?
It depends on what production means for you. For hobby and small-community deployments — yes, beta33 is functional and used in production by many community admins. For paid customer-facing hosting where SLAs and contracts mention software stability — the beta tag is a real concern, even if the software itself works fine. Wait for v1.0.0 stable in that case, or run Pterodactyl 1.12.x.
Will my Pterodactyl eggs work on Pelican?
Yes. Pelican uses the same egg JSON schema. Eggs from pterodactyl/yolks, parker, and the broader Pterodactyl egg ecosystem import into Pelican without modification. This compatibility was deliberate and is one of the key reasons the fork was practical.
Can I run Pterodactyl Wings with Pelican Panel (or vice versa)?
Not in production. The wire protocol is similar but the panels expect their own daemon and there are subtle differences in API expectations between betas. Use the matching daemon for whichever panel you've installed: Pterodactyl Wings with Pterodactyl Panel, Pelican Wings with Pelican Panel.
Does Pelican support multi-node setups?
Yes, officially since Pelican Wings v1.0.0-beta24 (February 2026). Multi-node was the main thing holding Pelican back from hosting-business use cases through 2025; that gap closed in early 2026.
Which is better for a hosting business with paying customers?
Pterodactyl, primarily because of WHMCS integration maturity. The Pterodactyl WHMCS module has years of production use across hundreds of hosts. Pelican-side billing tooling (Pelican-WHMCS, Paymenter) is improving but not yet at the same level of battle-testing. Re-evaluate in Q4 2026 once Pelican v1.0.0 stable ships and the billing ecosystem catches up.
How long does migration from Pterodactyl to Pelican actually take?
Plan for 30-90 minutes of customer-visible downtime depending on fleet size, plus 2-3 hours of admin time including the rehearsal on a clone VPS. Don't try to compress this. The real cost isn't the time — it's testing thoroughly enough that you don't need to roll back at 2am.
What about Wisp? It's also a Pterodactyl alternative.
Wisp is a separate commercial Pterodactyl-derived panel targeting hosting companies, with a closed-source business model. It's not the same conversation as Pelican (open-source community fork). If you're evaluating Wisp, that's a different decision — we cover it in our panels overview.
Can I run both panels on the same VPS?
Technically yes (different ports, different databases, different web roots), but in practice this is messy and not recommended. If you want to test Pelican alongside an existing Pterodactyl install, spin up a $5/month side VPS for the test. Cleaner and you can throw it away after.
Which one is more secure?
Neither is inherently more secure. Both shipped critical advisories in the past 12 months. Both are now being actively patched. Security on either panel comes from your hardening — putting the panel behind Cloudflare Tunnel, enforcing 2FA, applying patches within 24 hours of advisory publication. We cover this in our Pterodactyl security hardening guide (the same patterns apply to Pelican).
What hardware do I need for either panel?
The panel itself (PHP, Nginx, MariaDB, Redis) needs about 1.5 GB RAM. Add to that whatever your game servers need. For a panel + 2-3 small game servers a 4 GB VPS is the floor; for any kind of multi-tenant hosting you want 16 GB+. Use our VPS sizer tool to calculate exactly.
Is there a one-click installer for either panel?
Pterodactyl has the community pterodactyl-installer bash script (vilhelmprytz/pterodactyl-installer on GitHub). Pelican has a guided web installer built into the panel itself. Both work; both still require you to have a clean Ubuntu 22.04 or 24.04 LTS VPS and root access to start.
10 // Next steps
You've got the verdict, the timeline, the architecture, the security data, and the migration walkthrough. Now pick a path and execute:
- Decided on Pterodactyl? Follow our Pterodactyl install & setup guide for the full Ubuntu 22.04 / 24.04 walkthrough.
- Decided on Pelican? Follow our Pelican Panel install guide using the guided web installer.
- Either way, harden it. Read our Pterodactyl & Pelican security hardening guide — same patterns work for both panels.
- Running into install issues? Check the troubleshooting wiki for the 25 most common Wings/Panel failures and verified fixes.
- Building a hosting business? Read our multi-node hosting guide for billing integration, abuse handling, and scaling math.
- Need to size a VPS? Use the VPS sizer tool — it accounts for the ~1.5 GB Panel + Wings + MariaDB + Redis baseline.
Pelican is the future of this ecosystem. Pterodactyl is the present. Most of the internet still runs on Pterodactyl in 2026, and that's not going to flip overnight just because there's a friendlier fork available. Pick the one that matches your situation today — not the one that wins on Reddit threads.