Features

Everything to run productionNone of the work of owning it

Deploy and manage apps, databases, and templates in one place. Ask your AI agent to handle it.

Start deployingRead the docs

Code source

Start from the code you already have.

GitHub and GitLab auto-deploy on push. Bitbucket, Azure DevOps, and Gitea are git sources. Upload a zip or tarball when there is no repo.

service · overview
success

Code source

auto-deploy on push

repoacme/brain
branchmain
auto_deployon

Docker image · Separate service type. Public or private registry. No builder. Image is already built.

Builder

The stack you have is enough.

We find it and run it. Switch to Dockerfile, Static, or BuildPacks only if you need to. Static serves a folder. Same domains, logs, and compute as any other app.

builder
BuildPacks

Build the app with buildpacks.

builderbuildPacks
detectlanguage pack
overrideinstall · build · start

Environments

Staging and production. Same path.

Name the environment. It runs on one machine. You do not invent a second setup.

application · brain
brain

Operate

Fix production from the same place.

Variables, logs, deploys, scale, and domains stay with the app. Databases swap scale and domains for backups.

service · brain
Variables
DATABASE_URI{{ postgres.URI }}
NODE_ENVproduction
import.env

Encrypted at rest. Import a file or reference another service.

Data

The database sits next to the app.

Pick the engine your app already uses. Private by default. Expose a port when you must. Backups on machines you attach. ClickHouse backups are not available yet.

backups
hourlydailyweeklymonthly

disk, or your S3 · R2 · B2 · Wasabi · MinIO

ClickHouse backups are not available yet. Managed dFlow compute does not run database backups.

Worker nodes

No vendor lock-in.

Use our affordable compute, your Azure credits, or a machine you already have. Same deploy. AWS, GCP, and DigitalOcean can connect now. Full setup on those clouds comes later.

The whole surface

Everything that ships in the box.

No add-on tier for the basics. This is what a workspace can do on day one.

57

included

Deploy10

  • Git deploys from GitHub, GitLab, Bitbucket, Azure DevOps, Gitea
  • Auto Deploy on push for GitHub and GitLab
  • Require approval before deploy
  • BuildPacks, Railpack, Dockerfile, and Static builders
  • Custom build, install, and start commands
  • Docker image services from any registry
  • Archive upload deploys: zip, tar, tar.gz
  • Redeploy any previous deployment
  • Cancel, discard, and approve from the queue
  • Commit metadata on every deployment

Run10

  • Zero-downtime releases
  • Scaling presets and per-process limits
  • CPU and memory limits plus reserves
  • Replicas per process type
  • Persistent volumes mounted into services
  • Encrypted environment variables
  • Cross-service reference variables
  • Live runtime log streaming
  • Full build and deploy logs retained
  • Deploy concurrency caps per node

Data10

  • Postgres, MongoDB, Redis, MySQL, MariaDB, ClickHouse
  • Pinned image versions, or your own tag
  • Hourly, daily, weekly, and monthly backups
  • Retention of 24, 7, 4, and 3 by tier
  • Manual backups on demand
  • Backups to S3, R2, B2, Wasabi, MinIO
  • Restore and download from the dashboard
  • Private networking between services
  • Exposed ports when you need them
  • Connection strings generated on deploy

Infrastructure10

  • Attach any VPS, cloud instance, or on-prem box
  • SSH or Tailscale connectivity
  • Guided worker node onboarding
  • Pinned runtime package versions
  • Beszel monitoring by default
  • Optional Netdata install
  • Live CPU, memory, and disk telemetry
  • Dokku plugin management
  • SSH key management
  • Cloud security groups

Edge8

  • Unlimited custom domains per service
  • Let's Encrypt certificates
  • Automatic certificate regeneration
  • DNS record validation
  • Free default domain on up.dflow.sh
  • Wildcard dev domains via nip.io and sslip.io
  • Per-app Nginx proxy configuration
  • Default domain selection

Team9

  • Multiple workspaces per account
  • Custom roles with per-resource permissions
  • Read-only by default, writes granted per resource
  • Email invitations with expiry
  • Enterprise SSO: OIDC and SAML
  • GitHub, Google, magic link, and password sign-in
  • MCP access over OAuth consent
  • In-app notification inbox
  • Notification preferences per category

workspace ready

Build the product.We manage the infrastructure.

apps · data · domains · nodes

Connect the app you already have. The path after that stays the same.

Start deploying