4 of 4 onboarding slots left →
Product

Provision, build, deploy and operate - from one self-hosted platform

OptimusHub is a self-hosted platform that brings provisioning, development environments, delivery, and day-to-day operations into one place inside your network. Teams can provision new resources or use existing ones, with shared access controls and activity records across supported workflows. Workloads run as Docker containers, on Kubernetes, or as services running directly on machines.

Talk to us about your operating environment →
Eight categories, one platform

Everything to run on-prem without the chaos.

Provided by the platform itself, not by a separate product behind every screen. The external connections are a limited set: identity, virtualization platform, Git, and a container registry.

Infrastructure

VM Provisioning & Lifecycle Operations

Provision VMs through your virtualization platform with self-service requests and approval flows, then power, clone, resize, snapshot, and browser-console them. Recovery plans with priority-ordered power-on, and affinity rules.

Kubernetes

Kubernetes Provisioning & Operations

Create and install new Kubernetes clusters, not just connect to existing ones, with air-gapped workflows supported. Existing clusters can also be connected with a kubeconfig. Then deploy and operate workloads: Helm releases, namespaces, pod exec, and node cordon and drain. Access is assigned per user and group down to the namespace.

Catalogs

Application & Service Deployment

Deploy applications, databases, and monitoring stacks through unified catalogs and automated workflows - with Helm on Kubernetes, Docker Compose or containers on Docker hosts, or as services running directly on machines. See how on-prem application deployment works.

Security

Secrets, Certs & Vault

Built-in PKI/CA: issue, auto-renew, and revoke internal TLS certificates. Secrets and sensitive metadata are encrypted using Fernet (AES-128-CBC with HMAC-SHA256 authentication); persistent volumes and database stores rely on host and volume-level encryption configured within your environment.

Observability

Activity, Alerts & Logs

Activity records within OptimusHub of who did what, and when. Threshold alert rules with SMTP delivery. Live deployment log streaming and SSH tail.

Data

Backup & Query Studio

Database backup policies with cron schedules and on-demand runs. In-browser Query Studio for SQL and NoSQL databases.

Developer Tools

CLI, Workspaces & SSH

opti CLI covers every platform resource from the terminal - device-flow login or API tokens for CI/CD. Language-aware dev workspaces with browser VS Code, connected to your Git service. SSH console with connection activity recorded, and an internal web proxy.

Access Control

RBAC, SSO & Groups

Four built-in system roles (admin, devops, developer, dba; these cannot be modified or deleted) plus custom roles. SSO via OIDC, SAML 2.0, or LDAP with group-to-role mapping; MFA is delegated to your enterprise IdP. Namespace-level Kubernetes access grants.

Provision. Deploy. Operate. Govern.

1

Provision

Provision VMs through your virtualization platform with request and approval, deploy Kubernetes clusters, and install runtimes and tools such as Docker and Helm.

2

Deploy

Run delivery pipelines with the built-in CI/CD engine and deploy applications and services as Docker containers, on Kubernetes, or as services running directly on machines.

3

Operate

Run, monitor, and change the environment from one interface, consistently across sites, environments, and teams.

4

Govern

Role-based access control and activity records within OptimusHub show who acted and when, in a form your team can read.

What the platform does, and what it leaves in place.

OptimusHub is
  • A self-hosted platform, installed inside your network, that deploys Kubernetes clusters, provisions VMs, deploys applications and services, and operates them
  • Able to deploy Kubernetes clusters and install the runtimes and tools they need, then run workloads on them
  • Built for on-premise, hybrid, and air-gapped environments from day one
  • Useful to IT, DevOps, DBA, and software-delivery teams - not just Kubernetes specialists
OptimusHub is not
  • A cloud service that hosts your systems or data
  • A replacement for standard runtimes. OptimusHub uses technologies such as Kubernetes, Docker, and Helm to deploy and operate your software stack, and does not replace their underlying runtimes with proprietary alternatives
  • A runtime dependency for your applications
  • A component in your application's traffic path
Where this fits

One platform to build, deploy, and run your on-prem environment.

OptimusHub is a self-hosted platform for teams running critical infrastructure across on-premises, hybrid, and air-gapped environments. It deploys Kubernetes clusters, provisions VMs, deploys applications and services, and operates the result through one interface and one permission model, with activity recorded within the platform. It works with standard infrastructure technologies while preserving their underlying runtimes.

Explore by operating reality

Frequently asked questions

Infrastructure

What must already exist before installation?
A host that can run Docker for OptimusHub itself, which is intentionally not built around Kubernetes and so fits real enterprise VM estates. Kubernetes clusters, VMs, and the applications on them can be created through OptimusHub, so they do not need to exist first. Connections to identity, virtualization platform, Git, and a container registry are needed only for the workflows that use them. Exact prerequisites depend on your environment; talk to us about yours.
Can OptimusHub operate without internet access?
Yes. OptimusHub is designed for on-premises and private environments and can be installed inside your own network perimeter. A fully air-gapped install needs no outbound connectivity, and updates can be applied from locally uploaded image archives. Internet access is only needed for integrations you choose to enable, such as an external Git remote.
What does OptimusHub provide, and what does it connect to?
OptimusHub delivers deployment and operational capabilities within a self-hosted platform. It connects to a limited set of organizational systems: identity providers (LDAP / OIDC), virtualization platforms, Git services, and container registries, depending on the workflows you use. Teams can use an existing Git service or deploy one through OptimusHub.
Can it use existing resources as well as provision new ones?
Yes. You can connect existing Kubernetes clusters with a kubeconfig, work with your existing virtualization platform, Git, registry, and identity systems, or provision new VMs and clusters through the platform.
Does OptimusHub support hybrid environments?
Yes. OptimusHub is built to operate across mixed infrastructure estates, including on-premises resources and cloud-connected services. The goal is to give organizations one platform across heterogeneous infrastructure instead of forcing them into a single hosting model.

Deployment capabilities

Can OptimusHub create a Kubernetes cluster, or only connect to an existing one?
Both. OptimusHub can provision and install new Kubernetes clusters on supported infrastructure. It can also connect to and operate existing clusters.
Can OptimusHub deploy applications and databases, as well as infrastructure?
Yes. Applications, databases, and monitoring stacks are deployed from catalogs, alongside Kubernetes clusters and VMs, as Docker containers, on Kubernetes, or as services running directly on machines.
How is OptimusHub's built-in CI/CD different from standard Git-based pipelines?
OptimusHub includes a native CI/CD engine that goes beyond basic repository-triggered jobs. A pipeline can continue all the way to creating a real application entry in the platform catalog, which makes it much closer to an end-to-end platform workflow than a conventional "run steps and exit" pipeline.

Developer experience

What does the developer experience look like in OptimusHub?
A developer can create a full development environment with a single click. That environment is already connected to Git, based on a ready-made template, and includes a Web IDE connected to the same environment. OptimusHub currently supports templates for seven programming languages.
Can different teams get access to different areas in OptimusHub?
Yes. OptimusHub supports giving different teams access to different places and capabilities through its permission system. It is not yet a deeper multi-layer tenant model, but it supports practical access separation between teams today.
How fast can an organization get started with OptimusHub?
Getting started is meant to be fast. The platform is packaged for quick installation. Timelines depend on your environment; talk to us about yours.

See what you could provision, deploy, and run from one platform.

Bring one environment or workflow. We'll help map the current friction and where OptimusHub would fit.

Talk to us about your operating environment →