One binary. Every capability.
No plugin marketplace, no feature gates. Every subsystem below ships with every license. Your plan tier changes limits, not features.
Every layer, watched.
Real-time malware scan
YARA rules + signature feeds; scans on upload + on disk change.
Quarantine gateway
Uploads land in a sandbox before the app ever sees them.
Audit archive
Every action snapshotted + published to a Merkle transparency log.
Anomaly detection
Behavior baselines per license; surfaces deviation as alerts.
Runs itself, tells you why.
AI Doctor
Explains build/deploy failures; proposes fixes, applies on your approval.
Fleet Guardian
Cross-host ops without a centralized SaaS. Heartbeats, not telemetry pipes.
System Guardian
Predicts disk / memory / CPU failures ~48h out.
Automated backups
Per-project rollback points; restore in one click.
From folder to running, automated.
15-step provisioner
Scan → detect → build → SSL → run, tracked per stage.
Monorepo-aware
pnpm / npm / yarn / bun workspaces detected; apps routed per subdomain.
Per-customer registry creds
Short-lived tokens rotated on heartbeat, scoped to one license.
Multi-region ready
Residency pinning + regional primaries. EU customers stay in EU.