The Deployer is live. The Free plan ships a real app to a cloud account you own.

See pricing
Free plan, no card required / 3 projects included

Ship your app to your own cloud, without a DevOps team.

The Deployer is an agentic deployment platform for developers. Point it at a GitHub repository and AI agents read your code, design the architecture, provision your cloud, and set up a production-grade CI/CD pipeline with monitoring, logs, DNS, and a chat copilot. You know your codebase. It handles the infrastructure you were never hired to run.

Ships into your own account on
acme/shop / launch console
Live
Provisioning · step 6 / 24
Fig. 01 The launch console, streaming every step in plain English

One agent team, in place of an entire open-source DevOps stack

01The gap

You wrote the app. Running it is somebody else's job, except there is no somebody else.

A repository isn't a running product. In between sits provisioning, Dockerfiles, reverse proxies, TLS, secrets, CI/CD, monitoring, and DNS. That is a second discipline you never signed up to learn. The Deployer closes that gap, so shipping doesn't depend on hiring for it.

The old way
  • Hire a DevOps engineer, or lose your weekends to Terraform
  • Stitch together tutorials that each assume a different setup
  • Watch a deploy hang for hours behind a cryptic error
  • Get locked into an opaque platform you don't control
With The Deployer
  • Agents read the repository and design the whole architecture
  • Everything is explained in plain English, live, as it happens
  • Failures diagnose themselves, get fixed, and re-run automatically
  • It all runs in your cloud, on open-source tools you own
02How it works

From repository to running product in six steps

A deterministic orchestrator drives the flow, while specialist agents do the thinking inside each phase. You see every decision, and you approve the ones that matter.

Connect

Link a cloud account (AWS, GCP, Azure, or DigitalOcean) and GitHub. A guided walkthrough shows you exactly where to click, and every credential is encrypted in a vault.

Scan

The Repo Intelligence agent clones your code and detects languages, frameworks, services, ports, and environment variables, then builds a knowledge graph. It understands mono-repos too.

Architect

The Architect agent proposes three or four tiers, from hobby to scale. Each one is a concrete topology with clear trade-offs and a realistic monthly cost range. Pick the one that fits.

Design the workflow

Your pipeline appears as an editable canvas. Swap an implementation, remove an optional step, or ask the copilot to add ArgoCD between CI and deploy.

Launch

Agents write a plan, a compiler checks it against a safety policy, and the engine runs twenty to forty steps with live logs, automatic retries, and honest hand-off cards when a human is genuinely needed.

Operate & chat

You get a live dashboard for URLs, SSL, cost, and server health. After that, talk to it: "the site is slow", "add a domain", "rotate this secret". The agents handle it.

03The core

A team of specialist agents, working for you

The Deployer is not templated. A hierarchical orchestrator hands each phase to a focused agent that reasons over your repository's knowledge graph, and every action is schema-validated, auditable, and safe to resume.

Repo Intelligence

It shallow-clones your repository and runs deterministic detectors over manifests, lockfiles, Dockerfiles, and CI configs. Then a language model adds the semantic layer: what each service is, and how the pieces fit together. The detected facts are ground truth, so the model can enrich them but never overrule them.

  • Detects languages, frameworks, package managers, ports, and env vars
  • Understands mono-repos and lists selectable candidate services
  • Writes a portable knowledge graph, with a source and confidence on every node
  • Gives an honest verdict on deployability: auto, partial, or manual

Architect

It reasons over the knowledge graph, your chosen services, and a maintained pricing dataset to propose three or four tiers. Each one is a real topology rather than a vague suggestion, with the trade-offs stated plainly.

  • Hobby, Startup, Growth, and Scale, each a concrete service topology
  • Monthly cost ranges, with the assumptions and top cost drivers spelled out
  • Suggests the best-fit managed or serverless target, not always a raw VM
  • Flags a recommended pick, while the choice stays yours

Workflow Planner

It renders the chosen architecture as an interactive, editable node graph. Every node ships with a sensible open-source default plus swappable alternatives, and the mandatory ones are protected from accidental removal.

  • Source, CI, registry, deploy, runtime, proxy, and observability
  • Click any node for a plain-English drawer and its configuration
  • Swap an implementation from a curated open-source catalog
  • A validation panel blocks launch until the graph is sound

Provisioner

It turns the workflow into a structured plan, never raw shell. A deterministic compiler checks that plan against schemas, a command denylist, and your knowledge graph before a single step runs. Intelligence writes the plan; determinism executes it.

  • Plan, compile, then execute, so unsafe commands never reach a server
  • Provisions VMs, load balancers, firewalls, and DNS through provider SDKs
  • Tags every resource for cost attribution and clean teardown
  • Right-sizes the build node, and gates on a local sandbox build first

Code & Env Doctor

Some repositories aren't ready to deploy. The Code Doctor proposes small, reviewable changes (a health endpoint, a leaner Dockerfile, a CI workflow, a /metrics route), commits them to a branch, and updates the knowledge graph. The Env Doctor places your secrets on the services that need them.

  • Generates missing Dockerfiles, health checks, and CI/CD as real commits
  • Detects native dependencies and picks a compatible base image
  • Reads live server state, and only key names are ever sent to the model
  • Applies changes with a targeted redeploy, not a full rebuild

Recovery & Diagnostics

When a step fails, an escalation ladder takes over, so a non-engineer can survive real infrastructure. It retries, then diagnoses from the logs, then tries another strategy, and only then asks you for help with clear, numbered instructions.

  • Finds the root cause in the logs and patches the plan (a busy port becomes 8001)
  • Fixes the code, rebuilds, commits, and re-runs on its own
  • Switches to another tool or region when one path is blocked
  • Writes Manual Intervention Cards in plain English, with a resume button

ChatOps Copilot

A copilot for every project, grounded in your live dashboard and knowledge graph. It answers questions, edits the workflow through diffs you confirm, and runs "fix it" flows, with every action recorded in the audit log.

  • "What env vars does my backend need?", answered from the graph
  • "Add a domain" or "attach a Postgres", wired up with encrypted env
  • Workflow edits arrive as diff cards you confirm, never silent changes
  • Explains any step or log line in language a person can follow
04Radical legibility

Your whole pipeline, visible and editable

No black boxes. Every service the agents choose is a node you can open, swap, or remove, with curved edges that show how code and data move through your system.

Startup tier / workflow Valid, ready to launch
GitHubSource · acme/shop
required
Woodpecker CIBuild and test
RegistryDocker v2
App · apiFastAPI · :8000
App · webNext.js · :3000
PostgresManaged · 15
CaddyAuto-HTTPS proxy
GrafanaMetrics and logs
optional

Swipe to pan the board

Fig. 02 A Startup-tier workflow, exactly as the agents proposed it
05The platform

Everything a production deployment needs, handled

This isn't a toy. The Deployer sets up the full lifecycle: build, ship, route, observe, secure, and operate, all on open-source tools running in infrastructure you own.

Deploy to your own cloud, across four providers

Real provisioning on AWS, GCP, Azure, and DigitalOcean behind one abstraction. Keyless GCP auth, IAM-scoped AWS, DigitalOcean tokens: the agents speak each provider's SDK so you don't have to. The Deployer runs none of your infrastructure, so you keep control and can walk away with everything.

One abstractionYour accountNo lock-in

Deploys that fix themselves

Glibc-safe images, native-dependency detection, a health check that actually compiles, and a recovery agent that fixes, rebuilds, and commits.

Monitoring with zero setup

Prometheus, Grafana, Loki, node-exporter, and cAdvisor, wired up for you. Real dashboards for any app, plus a /metrics route added on your behalf.

Zero downtime on every deploy

Services roll one at a time. The new container must pass a health check beside the old one before traffic moves, so a broken build can never take your app offline.

Domains and DNS, done right

Say "set up a new domain" and it creates the hosted zone, detects your registrar, guides the delegation, and verifies it live. Extra domains attach without downtime.

Standalone cloud services

Create a database, cache, queue, or bucket on any provider. An Attachment Doctor reads your code, says whether it fits, then wires encrypted env and redeploys.

SSH and env, in your browser

Real terminals to your servers and a live environment manager. Read values off the box, edit them, apply with a targeted redeploy. Secrets never leave your infrastructure.

A copilot that operates your infrastructure

ChatOps isn't a chatbot bolted on. It drives the same validated engine the UI uses. Ask it to add a node, attach a service, diagnose a 500, or explain a log line. Changes appear as diffs you confirm, and everything lands in an audit trail. It's the on-call engineer you didn't have to hire.

Grounded in your knowledge graphConfirmable diffsFully audited
5
Cloud providers,
one abstraction
9
Specialist agents
on your team
0
DevOps hires
you have to make
100%
Open-source stack
you fully own
06Security model

Admin access, engineered to stay safe

Deploying to real infrastructure means holding powerful credentials. The Deployer is built so that power can't leak into a prompt, a log, or a database in the clear.

Encrypted credential vault

Every secret is encrypted at rest with Fernet. The master key lives in the environment, never in the database, and API responses reveal only metadata and the last four characters.

Secret-handle indirection

Agents and plans carry secret:// references, never the real values. Only the deterministic step runner resolves them, in memory, at the moment of use.

Command policy and compiler

A denylist blocks destructive patterns, and any tool with side effects only produces a proposal that has to pass validation. The step engine executes; it never improvises.

Dedicated keys and full audit

A fresh ed25519 keypair per project, injected at provision time, so your personal keys are never requested. Every side effect is written to an audit log.

Credential vault
AWS_SECRET_ACCESS_KEY••••••••••••7Qy4encrypted
DATABASE_URLsecret://conn/42/dbhandle
GITHUB_PAT••••••••••••a1F9encrypted
SSH_KEY (project)ed25519 · per-projectgenerated
Agent prompt carries a handle → Compiler resolves in memory → Server
No raw secret ever reaches the model or the logs
07Open-source first

A curated stack of tools you can actually own

Every layer defaults to a self-hostable open-source tool, with vetted alternatives the agents can swap in. No proprietary runtime, no lock-in, and no surprise bill.

CI / CDWoodpecker CIGitea Actions, Drone, Jenkins
RegistryDocker Registry v2Harbor
Proxy / TLSCaddynginx + certbot, Traefik
DeployCompose · K3s + ArgoCDKamal, Dokku
DatabasePostgresMySQL, Mongo, managed
Cache / queueRedisValkey, RabbitMQ
MetricsPrometheus + GrafanaNetdata, SigNoz
LogsGrafana LokiOpenSearch, Graylog
UptimeUptime KumaGatus
AlertsGrafana AlertingAlertmanager + ntfy
ErrorsGlitchTipself-hosted Sentry
Backupsrestic to object storageprovider snapshots
08Languages and frameworks

It reads your stack before it builds anything

The scanner works out the language, the framework, the port your app listens on, and the lock files it pins, then writes the right build and run steps for you. These are the stacks it understands today.

Node.js JavaScript and TypeScript Next.js, Vite, Create React App, Express, and plain Node services or background workers. Front-end config is baked into the build, so the finished site calls the right API.
Python Django, Flask, FastAPI Standard Python web apps and APIs, plus Celery workers. Health endpoints are added for you when a framework needs one.
Go Web services and APIs Compiled into a small production image, with the build and start commands read from your module files.
Rust Web services and APIs Release builds compiled in a builder stage, then shipped as a slim runtime image.
Java Spring Spring applications, including the health endpoint the platform needs to verify a deploy.
Ruby Ruby on Rails Rails apps, with the dependency versions your lock file pins.
PHP PHP web applications Served behind the same auto-HTTPS proxy as everything else.
Dart Flutter web Flutter builds for the web, with your configuration compiled into the bundle, since Flutter has no runtime environment.
Static Plain sites and build output HTML, CSS and JavaScript, or whatever your build step produces. Served as files, with nothing left running.

Built with something else? If your repository already has a Dockerfile or a Compose file, The Deployer will use it. Mono-repos are understood too, and every scan ends with an honest verdict on whether your project deploys automatically, needs a little input from you, or is not a fit yet. You see that verdict before you spend anything.

09Where it fits

The control of DIY, the ease of a platform

Not a raw cloud console, and not a walled garden. The Deployer gives you both ends at once.

 
DIY / DevOps hire
Closed platform
The Deployer
Runs in your own cloud
Yes
No
Yes
No DevOps expertise required
No
Yes
Yes
Open-source, no lock-in
Yes
No
Yes
Designs the architecture for you
No
Partly
Yes
Self-heals failed deploys
No
Partly
Yes
Chat copilot that operates infra
No
No
Yes
Transparent, per-step live logs
If you build it
Hidden
Yes
10Built for

For developers who ship without a platform team behind them

I can build the product all day. It's the VPC, the reverse proxy, and the TLS renewal that used to eat my week. I connected the repo, picked the Startup tier, and it shipped.
MMayaFull-stack developer, solo founder
We're four engineers and no DevOps hire. I told the chat to add ArgoCD before deploy, it planned the change and showed me a diff to confirm. That's the review step I'd have wanted anyway.
PPriyaBackend engineer, seed-stage team
The self-healing won me over. A build failed on a native dependency, and the recovery agent switched the base image, rebuilt, committed the fix, and carried on. That's a senior engineer's afternoon, done automatically.
DDanTechnical co-founder

Composite personas that illustrate the intended experience during private beta.

11Pricing

Start free. Nothing to pay us.

The Free plan is live today and it's genuinely enough to run a real product. Your cloud provider bills you directly for your own infrastructure. We never mark it up, and we never touch it. Paid plans are being finalized and aren't purchasable yet.

Available now

Free

$0/ mo

Ideal for solo developers. Everything you need to get a real app live and keep it running.

  • 3 projects
  • 5 services configured
  • 5 deployments per day
  • 50k AI tokens per day
  • 1 user (no collaboration)
  • The full agent team, live logs, and self-healing
  • Monitoring, domains, and the chat copilot
Start free

No credit card. Your cloud provider bills you directly.

Coming soon

Pro

$30/ mo

For small teams shipping together.

  • 15 projects
  • 30 services configured
  • 30 deployments per day
  • 1M AI tokens per day
  • Collaboration for up to 10 members
  • Everything in Free
  • Priority support

Not available yet. We'll announce it here.

Coming soon

Enterprise

Talk to us

For organisations operating many services.

  • Unlimited projects and services
  • Unlimited AI tokens per day
  • Unlimited members and roles
  • Shared connections and full audit
  • SSO
  • Dedicated support and onboarding
Talk to us

Tell us what you need and we'll get back to you.

12Documentation

Read the docs before you commit to anything

Full documentation is public, and no account is needed. Every provider is walked through click by click, and the limits are stated plainly so you know what works before you start.

13Questions

Frequently asked

Who is this actually for? Do I need DevOps experience?
It's for developers who don't have a DevOps team behind them. You should know your own codebase (what services it has, roughly what it needs to run) and be comfortable with GitHub and a cloud signup. You do not need to know Terraform, Kubernetes, reverse proxies, or TLS renewal: that's the part the agents own. Everything technical is explained in plain English as it happens, and when a human step is genuinely unavoidable you get numbered instructions and a resume button.
Whose cloud does my app run on?
Yours. The Deployer provisions everything into your own AWS, GCP, Azure, or DigitalOcean account, using credentials you grant. We run no infrastructure for your app, so you pay your provider directly and can take everything with you whenever you like.
Is it safe to give it my cloud credentials?
Security is the core of the design. Credentials are encrypted at rest with the master key kept out of the database. Agents only ever see secret:// handles, never the real values, and a deterministic compiler with a command denylist checks every action before it runs. Every side effect is audited, and we recommend scoped-admin credentials rather than root.
What happens if a deployment fails?
An escalation ladder handles it: an automatic retry first, then a diagnostics agent that finds the root cause in the logs and patches the plan, then an alternative strategy, and only as a last resort a plain-English manual card. The recovery agent can even fix your code, rebuild, and commit the change before resuming the run.
Which repositories and stacks are supported?
Mainstream stacks work well: Node, Python, Go, Java, Ruby, PHP, Rust, static sites, and anything with a Dockerfile or Compose file, mono-repos included. During the scan you get an honest verdict on deployability, so you know up front whether something needs your input.
Will my app go down while it redeploys?
No. Each service rolls over one at a time. The new container boots beside the one that is already running and has to pass a health check before a single request is sent to it, and only then does the old container drain and stop. Requests that are already in flight are never cut off. If the new build fails its health check it is discarded and the old version keeps serving, so a bad deploy cannot take you offline. Environment variable changes use the same rollout, and the proxy retries during the swap so nothing is dropped.
Can I change things after it's deployed?
Constantly. That's the whole point. Use the visual workflow canvas, or chat: "add a domain", "attach a Redis", "the site is slow". The copilot plans the change, shows you a diff to confirm, and runs it against the same validated engine the rest of the product uses.
How much will my infrastructure cost?
The Architect agent shows a realistic monthly range for each tier, with the assumptions and top cost drivers spelled out, because exact cloud pricing depends on region and usage. After you deploy, the dashboard tracks the actual bill and flags any drift from the estimate.
Free plan

Ship your repository to your cloud,
and let the agents run the infrastructure.

Three projects, five services, and five deploys a day, free and with no credit card. You only ever pay your own cloud provider.

14Contact

Talk to us

Questions about a stack we haven't listed, an enterprise rollout, or something that broke? Send a message and we'll reply by email.

We'll only use your email to reply to this message.