bootload

serious isolation,
casual experience

bootload is what hosting feels like when the hard parts — isolation, TLS, networking, backups, billing — are someone else's deck to swab.

🚢

A real microVM, not a shared runtime

Every app boots in its own Firecracker microVM behind a jailer — the same isolation technology AWS Lambda runs on. Your neighbors can be noisy, malicious, or both; they are not in your kernel.

🔒

Encrypted by default

Volumes are LUKS-encrypted with per-volume keys. Backups are encrypted, exportable, and verifiable — your data is never held hostage. Secrets are delivered into the VM at boot and never touch disk, logs, or our bus.

🌊

Networking that just works

Automatic HTTPS with managed certificates, WebSockets on by default, private per-project networks, raw TCP with a dedicated IPv4 when you need more than HTTP.

Idle Harbor (coming soon)

Opt a service in and its microVM suspends to a snapshot when traffic stops — you pay storage only while it sleeps, and the next request wakes it in under a second. See the Idle Harbor page for use cases.

🪙

Prepaid, per-second, capped

Fund a wallet, watch it drain per second of actual use, see every price as a max-per-month. Runway warnings at 7d/3d/24h/1h. Scale to zero, pay zero.

✉️

Mail included

Managed SMTP with DKIM signing at €0.001 per email. One-click apps that need mail (like n8n) get their SMTP config prefilled automatically.

🤖

CLI, API, web & MCP

Everything works from the CLI, the REST API, the web portal — and via MCP, so even your AI agent can deploy. Spending actions are confirm-guarded.

⚙️ how a deploy actually works

under the hood
1. you push an image (any registry — public, private, or ours) 2. we build a rootfs and boot a Firecracker microVM (~125ms boot) 3. secrets arrive over vsock — never in the image, never logged 4. health check goes green → route activates → cert issued 5. https://yourapp.com answers — typically < 10s end to end
🌊 try the quickstart 📦 or one-click an app