serious isolation,
casual experience
bootload is what hosting feels like when the hard parts — isolation, TLS, networking, backups, billing — are someone else's deck to swab.
A real microVM, not a shared runtime
Every app boots in its own Firecracker microVM behind a jailer — the same isolation technology AWS Lambda runs on. Your neighbors can be noisy, malicious, or both; they are not in your kernel.
Encrypted by default
Volumes are LUKS-encrypted with per-volume keys. Backups are encrypted, exportable, and verifiable — your data is never held hostage. Secrets are delivered into the VM at boot and never touch disk, logs, or our bus.
Networking that just works
Automatic HTTPS with managed certificates, WebSockets on by default, private per-project networks, raw TCP with a dedicated IPv4 when you need more than HTTP.
Idle Harbor (coming soon)
Opt a service in and its microVM suspends to a snapshot when traffic stops — you pay storage only while it sleeps, and the next request wakes it in under a second. See the Idle Harbor page for use cases.
Prepaid, per-second, capped
Fund a wallet, watch it drain per second of actual use, see every price as a max-per-month. Runway warnings at 7d/3d/24h/1h. Scale to zero, pay zero.
Mail included
Managed SMTP with DKIM signing at €0.001 per email. One-click apps that need mail (like n8n) get their SMTP config prefilled automatically.
CLI, API, web & MCP
Everything works from the CLI, the REST API, the web portal — and via MCP, so even your AI agent can deploy. Spending actions are confirm-guarded.