Think of Zot as the registry equivalent of a well-run warehouse: OCI images and artifacts come in, get cataloged, checked, and shipped back out to any compliant client. The bundled web interface lets you browse repositories and tags, inspect image details, and copy ready-made pull commands for Docker, Podman, and Skopeo instead of memorizing registry URLs. Sync extensions mirror upstream registries such as Docker Hub on a schedule or on demand, which keeps air-gapped and rate-limited environments supplied without manual image ferrying. Scrubbing walks the storage in the background comparing blocks against their SHA-256 checksums, so silent bit-rot gets caught by the registry instead of by a failed production deploy. Signature verification with Cosign and Notation checks that images came from who they claim, search answers queries across the catalog, and CVE scanning flags vulnerable images before they spread. Prometheus metrics, a management API, and webhook events cover the operations side, while the minimal image strips everything but the distribution spec for embedded or high-security deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.