What Infraveil Does

One place to run
your whole backend.

Deploy your code, keep it running, lock it down, and watch it — all from one dashboard, on servers you own. Below is everything Infraveil does, in plain terms. It replaces the handful of separate tools most teams glue together to run their backend.

One API
Built On

A single API behind the whole platform.

Real views
Dashboard

Each part of the platform has its own view, not a tab of one chart.

Every server
Runtime

Health checks, restarts, routing, and recovery, wherever you deploy.

Built in
Security

Encryption, access control, and abuse defense, included.

Everything here ships in the software today, not on a roadmap. You can read the source to check.

The Dashboard

Everything in one dashboard.

No more SSHing into servers or jumping between tools to find out what's happening. Every screen below shows live data and lets you act on it. Together they replace a deploy tool, a monitoring service, an incident tool, a status page, and a firewall.

Core Operations

Overview — live metrics and system status
Incidents — one place to handle active issues
Deployments — ship and manage your services
Servers — manage the machines you connect
Status Page — a public health page for your users

Network & Routing

Gateway & Routes — how requests reach your services
Request Trace — see incoming traffic, request by request
Network — connection and traffic stats
Internal Network — traffic between Infraveil and your app

Logs & Visibility

Console — live logs as they happen
Diagnostics — traces when you need to dig in
Pipeline Logs — why each request was allowed or blocked
Monitoring — choose what to track

Performance & Capacity

Capacity — spot what's running hot or slow
Cache & Queue — cache and queue stats
Scale — how copies and load are spread across servers

Security & Trust

Security Center — rules that block bad traffic
Receipts — a record of what ran and who did what
Sign-in Settings — logins and extra checks for risky actions

AI & Recovery

AI Fixes — reads your logs and suggests what to do
Process Control — start, stop, and watch services
Assistant — only does what you allow

Code & Delivery

Catalog — a list of your services and APIs
Rollout — release to servers in stages
Editor — edit your code in the dashboard
API Reference & Docs — built in

Account & Settings

Billing, Usage & Export Data
Integrations — Slack, Teams, incident.io, GitHub, webhooks
Settings, Support & Feedback

Plus a 6-Screen Admin View

Workspaces, server inventory, incidents
Activity feed, support queue, key metrics

The screens that run the platform itself.

Deploy & Run

From your code to running, fast.

Push your code, check it, send it to your servers, and roll it out in stages — from the same dashboard that keeps it running afterward.

Ship Your Code

Read and write your files safely from the dashboard
Updates apply all at once, so you never run a half-copied build
Each deploy is checked and fingerprinted before it runs

Manage Your Servers

Add, remove, and safely empty servers before maintenance
Set limits, regions, and labels per server
Restart, run health checks, and report capacity in one click

Control Rollouts

Choose whether services spread out or pack onto fewer servers
Rebalance by hand whenever you want
Release one server at a time to catch problems early

Easy Setup

Signed installers for Windows and Linux
One-time install codes, protected by a 2FA check
Each server proves who it is before it gets your code

Keep Your Data

Stored data survives every code update
Each service runs in its own isolated environment
One config file defines your services and health checks
Always-On Recovery

It keeps your services running.

A small piece of Infraveil software runs on your servers. It starts your services, watches them, and restarts anything that crashes. It checks everything before it runs, and it keeps working even if it can't reach Infraveil.

Runs What Your Config Says

Infraveil keeps the running services matched to your config. If they drift apart, it fixes them — it doesn't just report the problem.

Health Checks & Auto-Restart

It checks each service every 30 seconds and restarts one after 3 failures in a row. If something keeps failing, it stops retrying and alerts you instead of looping forever.

Works Even If Infraveil Is Down

Your services keep running on your servers even if Infraveil's dashboard goes offline. It reconnects on its own when the connection comes back.

Nothing Runs Until It's Verified

Code arrives encrypted and is checked against several signatures — including your own approval — before it runs. If any check fails, it won't start.

One-Step Rollback

Infraveil keeps your recent working versions, so a bad release can fall back to the last one that worked.

Built-In Traffic Gateway

A built-in gateway routes traffic to your services, keeps them off the public internet directly, and reads each visitor's IP and location.

Won't Fill Up Your Disk

Logs are capped and rotated so they can't fill the disk, and disk usage is reported back to you continuously.

Windows & Linux

Runs the same way on both Windows and Linux, sets up its own environment, and cleans up leftover processes on shutdown.

Clean Shutdowns

Services shut down gracefully and save their state, and Infraveil installs anything they need to start up on its own.

Security & Trust

Security comes built in.

There's nothing extra to buy and no code for you to change. Encryption, logins, and bad-traffic defenses are part of the platform — and you can read the source that does it.

Encryption & Signing

Your code is encrypted in transit and at rest
Every request and response is signed and checked
Releases are signed so they can't be tampered with
You hold the final key — nothing runs unless you signed it

A Record You Can Trust

Every action is written to a tamper-evident log
The log can't be edited without leaving a trace
You can run the checker yourself to confirm it's intact
Export signed proof for audits

Logins & Access

Sign in with Windows Hello, Touch ID, or an authenticator app
Two-factor codes can't be reused
Risky actions ask you to confirm again
Optional PIN and account recovery

Stops Bad Traffic

Rate limits that auto-block abusers
Allow or block traffic by country
Trap routes that slow down attackers
Catches suspicious patterns and oversized requests

Safe By Default

Blocks its own software from reaching internal addresses
HTTPS required everywhere
Security rule changes must be signed
When in doubt, it blocks rather than risks it

Clear Boundaries

Each workspace is walled off from the others
Every action is checked against your role
Secrets are encrypted and kept out of logs
Incoming webhooks are verified before they're trusted
AI Assistant

An AI helper that only does what you allow.

The assistant reads your logs and diagnostics and suggests fixes. It can't make a real change unless you've allowed that exact type of action — and anything that writes or deploys asks you to confirm first. You decide what it can and can't touch. Use your own AI provider key.

Review mode only suggests changes. Auto mode can act, but only within the limits you set.

Read
status, logs, traffic, source
Gated Write
edit source, deploy
Gated Control
restart agents & launchers
High-Risk
change policy, change placement
You Hold The Key

Nothing runs on your servers unless you signed it.

This is the strongest control we can give you, and it runs on your machine, not ours. You create an approval key, and the private half never leaves your servers. After that, every release must be signed with your key — or your servers refuse to run it. Even if Infraveil's systems were breached, no one could push code to your servers without your key.

1 · Register
Set up your key

Create a key on your own machine and register the public half (protected by a 2FA check). Deploy once and your servers lock to it.

2 · Run the approver
On your own machine

A small, readable program watches for releases waiting on your sign-off and signs them locally. Your key stays put; only the signature leaves.

3 · You decide
Your policy, your veto

Approve each release by hand, auto-approve only builds you pre-approved, or pause everything. Held releases never run.

Manual
review and sign each release yourself
Allowlist
auto-approve pre-approved builds, hold anything unexpected
Auto
approve every push (hands the veto back)

The token the approver uses can only read pending releases and submit signatures — it can't create one, because that needs your private key, which it never has. So a stolen token still can't push code to you. The approver is short enough to read top to bottom.

Records & Integrations

Your data stays yours.

Putting everything in one place shouldn't lock you in. You can export your records anytime, and Infraveil connects to the tools your team already uses.

Audit & Receipts

A record of every release you approved and every action taken, with signed proof you can hand to auditors.

Logs & Export

All your logs in one place, plus a bulk export so your data is never trapped inside Infraveil.

Connect Your Tools

Send alerts to Slack, Teams, incident.io, GitHub, or any webhook — with a test button so you know it works.

Choose Your Alerts

Pick exactly which events each tool hears about — incidents, security alerts, AI suggestions, and more — so nobody gets buried in noise.

Simple Billing

Pay through Stripe and manage your plan yourself. A flat monthly price — no surprise usage charges.

Roles & Access

Give each teammate the right level of access. If our support needs to look, you grant it, it's logged, and you can revoke it.

Less Common Capabilities

A few things you won't find elsewhere.

Most platforms list these as planned. Infraveil ships them today, and you can read the source.

Build Your Own Security Rules

Set up what to watch for and how to respond, then push it to your servers — no coding required. You're not stuck with a fixed rule set.

Protects Against Internal Attacks

Infraveil's own software is blocked from reaching internal or cloud-metadata addresses — a common way attackers pivot inside a network. Most products never guard this at all.

Automatic Failover

If a server goes down, your services move to a healthy one on their own — and rebalance again once it recovers.

See It For Yourself

Don't take our word for it.

Everything on this page runs in software you can read on your own machine. You don't have to trust the feature list — you can check it.