Template gallery

Features

Everything you need.
Nothing you don't.

Progressive deploys

Canary, blue-green, and wave deployments with built-in rollback triggers. Promote on SLO health, not wall-clock timers.

PR-native workflow

Every change is a pull request. Every deploy links back to a commit. Every rollback is a git revert — full audit chain.

Unified observability

Traces, metrics, logs, and continuous profiling, correlated by deploy and request. No extra agents, no extra bills.

Policy engine

Write policies in code, enforce at admission time. Break-glass flows with two-person approval. Every override logged.

CLI-first

Everything the dashboard does, the CLI does. Ship scripts not screenshots. Supports bash, zsh, fish, pwsh.

Multi-cloud orchestration

AWS, GCP, Azure, bare metal, on-prem — consistent semantics across them all. Schedule workloads by cost, latency, or compliance.

Enterprise security

SSO + SCIM, SOC 2 Type II, ISO 27001, HIPAA BAA on request. Customer-managed encryption keys available.

Org-scale RBAC

Fine-grained roles scoped by cluster, namespace, or service. IdP group mappings. Just-in-time elevation for on-call.

Workflow engine

Long-running workflows with retries, timeouts, and human approvals — all observable, all replayable, all auditable.