01
Connect
Link a repository or OCI image.
Detection · webhooksLoading SkyForge…
Loading SkyForge…
SS-47 · Sovereign application platform
Ship services, workers and scheduled jobs with CI/CD, policy, data and observability built in.
No credit card · One app free forever · Deploy in under five minutes
Bring your code. Keep your stack.
Your end-to-end platform
Five product surfaces, 148 operations and one identity, policy and audit spine.
Push a repo; get a governed, routable app.
Hermetic builds with waved agent autonomy.
A leased environment per PR — reclaimed on its own.
Declare a backend; get collections, functions and an SDK.
Run a suite; produce signed release evidence.
One continuous delivery spine
One durable workflow from source to service.
Link a repository or OCI image.
Detection · webhooksUse managed or self-hosted runners.
BYO runners · cacheRun tests and enforce quality policy.
TestGrid · gatesVerify signature, SBOM and vulnerabilities.
Cosign · SBOM · scanPromote immutable revisions safely.
Sagas · approvalsScale, observe and meter workloads.
DORA · audit · FinOpsBuilt for real production work
Each capability is part of the live SS-47 contract — not a roadmap slide or a partner integration you still have to assemble.
A resumable build → gate → admit → roll → route workflow with safe compensation.
POST /apps/{app}/deploy/sagaPer-PR environments with TTL leases and automatic reclamation.
POST /apps/{app}/previewsUnhealthy rollouts return to the last-good revision automatically.
POST /apps/{app}/rollout/healthImmutable revisions provide deterministic, auditable rollback.
POST /apps/{app}/rollbackScale on CPU, memory or HTTP rate within tenant quotas.
PUT /apps/{app}/scaleSchedule recurring workloads with exactly-once effects.
POST /apps/{app}/cronsEvery push can build, test, scan, gate and deploy automatically.
POST /webhooks/{provider}Tests, vulnerability ceilings and signature policy block unsafe releases.
PUT /apps/{app}/gatesBind managed data services through Vault-backed secret references.
POST /apps/{app}/addonsDORA metrics, stage latency and flaky-test signals are built in.
GET /cicd/doraRun builds on registered Linux infrastructure with managed fallback.
POST /runnersExport portable desired state without exporting credentials.
GET /apps/{app}/exportBuild more. Maintain less.
SkyForge turns the shared platform into a coherent developer experience. The hard operational controls stay present, but they stop becoming application-team projects.
Identity, secrets, databases, observability, CI/CD and billing are available from the first deploy.
Hierarchical tenancy, mTLS and regional controls are structural platform guarantees.
Every image requires a signature, SBOM and vulnerability verdict before serving traffic.
Use self-hosted Linux runners with automatic managed fallback.
Resumable deploy sagas recover safely and preserve every quality gate.
Signed audit evidence captures every material platform action for seven years.
Pricing
Start with documented allowances. Every meter has predictable enforcement and an auditable owner.
Free is active. Paid plan prices remain explicitly TBD until commercial approval.
A useful developer allowance with hard, predictable limits and no paid overage.
Higher ceilings for pilots, hackathons, startup launches, and corporate prototypes.
Production-oriented allowances for individual developers and small teams.
Governed capacity for growing organizations and multi-team delivery.
Contract entitlements, dedicated infrastructure options, policy, and advanced governance.
Quickstart
Use the skyforge CLI for the git-push workflow, or drive the API directly. Every app route is governed — an SS-01 bearer token plus your X-Tenant-Id.
# Connect once — then every push deploys itself.
# 1. Point SkyForge at your repo (any of 10 providers)
$ skyforge apps connect orders-api \
--repo github.com/acme/orders-api --branch main
# 2. Turn on hands-off auto-deploy (gates stay required)
$ skyforge autodeploy enable orders-api --branch main
# 3. Ship. A push runs checkout -> build -> test -> scan -> gate
# -> admit (Cosign + SBOM) -> roll -> route, no human in the loop.
$ git push origin main
→ run succeeded · deployed revision orders-api-r42
→ https://orders-api.acme.skyforge.app# Create an app, then run a crash-safe deploy saga over the API.
# Auth is a platform-standard SS-01 OIDC token + your tenant header.
export TOKEN=... # from signup / API key
export TENANT=acme
# Create the app
curl -X POST "https://api.skyforge.io/api/v1/apps" \
-H "Authorization: Bearer $TOKEN" -H "X-Tenant-Id: $TENANT" \
-H "Idempotency-Key: $(uuidgen)" -H "Content-Type: application/json" \
-d '{"name":"orders-api","repo":"git@github.com:acme/orders-api.git","branch":"main"}'
# Start the deploy saga: build -> gate -> admit -> roll -> route
SAGA=$(curl -sX POST "https://api.skyforge.io/api/v1/apps/orders-api/deploy/saga" \
-H "Authorization: Bearer $TOKEN" -H "X-Tenant-Id: $TENANT" \
-H "Content-Type: application/json" -d '{"git_sha":"9b2c867","gate":"pass"}')
# Advance / resume — crash-safe, picks up at the failed step
curl -X POST "https://api.skyforge.io/api/v1/apps/orders-api/deploy/saga/$(echo "$SAGA" | jq -r .id)/advance" \
-H "Authorization: Bearer $TOKEN" -H "X-Tenant-Id: $TENANT"Onboarding
Identity, tenancy, secrets and metering activate together.
Create your OIDC identity.
Receive an isolated tenant.
Issue a Vault-backed API key.
Track usage per second.
Consolidate usage and billing.
Get started
Bring a repository. Get a governed TLS endpoint in minutes.
Frequently asked
Technical depth remains in the documentation.
Read the documentationNo. It unifies CI/CD, testing, admission, previews, data bindings, operations and metering.
Containerized services, workers and scheduled workloads from source or OCI images.
Yes. Self-hosted Linux runners include automatic managed fallback.
Every image requires a signature, SBOM and vulnerability-policy pass.
Tenant boundaries, placement, authorization, secret custody and signed audit are built in.
Yes. Start with one repository and add capabilities through the same API, CLI and console.