Features

Build & deploy

  • Static, React and Node.js project types from Bitbucket
  • Builds at an exact commit SHA in isolated workspaces
  • Immutable releases + artifacts with checksums
  • Live build logs streamed over SSE, with secret redaction

Runtime & routing

  • Node.js runtime containers with health checks before promotion
  • Zero-downtime promotion and one-click rollback (no rebuild)
  • Traefik routing generated from trusted platform state
  • Default subdomains + DNS-verified custom domains with TLS

Operations

  • Lightweight host / worker / deployment / route metrics + dashboards
  • Email + webhook notifications (deploys, rollbacks, domains, quotas, backups, workers)
  • Per-tenant quotas enforced across API, scheduler and worker
  • Scheduled PostgreSQL + artifact backups with restore validation
  • Retention cleanup for logs, metrics, artifacts and stale workspaces

Security

  • Google SSO + Bitbucket OAuth only — no passwords
  • Permission-based RBAC, audit logs on every sensitive action
  • Encrypted secrets (AES-256-GCM), never returned over the API
  • No Docker socket, secrets or internal APIs exposed to tenant workloads