Skip to content
Book a demoJoin waitlist

Product

Join the waitlistBook a demo

Deploys

Push to deploy. No downtime.

Connect GitHub, GitLab, Bitbucket or any Git remote. Each push builds a new release, passes a health check and switches over at once. If something looks wrong, roll back to any recent release in one click.

Join the waitlistBook a demo

  • Git, done properly

    A GitHub App with per-repository permissions, push-to-deploy webhooks with signature checks, and branch and tag rules.

  • Atomic releases

    Build into a new release folder, switch the current link, and keep shared folders such as uploads in place.

  • Health-checked

    If the HTTP or TCP check fails, the deploy fails and traffic stays on the release that works.

  • Domains and SSL

    Several domains per app, redirects, and Let's Encrypt certificates, wildcards included, renewed automatically.

Deployment history for the storefront app, with status, commit, duration and rollback for each release.Deployment history for the storefront app, with status, commit, duration and rollback for each release.

Deployment history with status, commit, duration and rollback for each release.

Source and builds

Connect a repository and build on the server or from your CI.

  • GitHub App

    Per-repository permissions; no broad personal access tokens.

    Git and source control

  • GitLab, including self-managed

    OAuth app per instance.

    Git and source control

  • Bitbucket

    OAuth connection.

    Git and source control

  • Any Git remote

    HTTPS or SSH with a generated deploy key.

    Git and source control

  • Repository and branch picker

    Browse repos and choose a branch or tag.

    Git and source control

  • Push-to-deploy

    Webhooks with signature checks and replay protection.

    Git and source control

  • Branch and tag rules

    Deploy only main, only tags matching v*, or only after CI passes.

    Git and source control

  • Monorepo support

    Root directory per app; only apps whose paths changed are deployed.

    Git and source control

  • Submodules, Git LFS and private registries

    Private npm, Composer and Cargo registries supported.

    Git and source control

  • Commit status checks

    Deploy status reported back to GitHub and GitLab.

    Git and source control

  • AI repo analyzer

    AI

    On connect, detects framework, package manager, Node version, ports, migrations and workers.

    Git and source control

  • AI env var discovery

    AI

    Finds every environment variable the code reads and flags missing ones before the first deploy.

    Git and source control

  • Build on the server

    Default build mode for small apps.

    Builds

  • Build logs with step timings

    Streamed output, with each step's duration.

    Builds

  • Build cache

    Keeps node_modules, .next/cache and Cargo target between builds.

    Builds

  • Dockerfile builds

    Build images on deploy with layer cache.

    Builds

  • Build resource limits

    CPU and RAM caps so a build never starves production.

    Builds

  • AI build failure explainer

    AI

    Points to the failing line, explains the cause and offers a fix (missing env var, wrong Node version, lockfile mismatch).

    Builds

On the roadmap · 5 more
  • Gitea, Forgejo and GitHub EnterpriseSelf-hosted Git services.
  • Deploy-key rotationRotate keys per repository on a schedule.
  • Dedicated build serverBuild elsewhere and ship the artifact to app servers.
  • Accept CI artifactsUpload a build from GitHub Actions or GitLab CI and deploy it.
  • AI build speed advisor AIFinds slow steps and suggests caching or parallelism, with estimated time saved.

Deploy and release

Releases, rollbacks, promotion and previews.

  • Core app types

    Node.js, Next.js, NestJS, Laravel/PHP, static sites and Docker/Compose.

    Deployments

  • More app types

    Python (Django, FastAPI), Go, Rust binaries, Rails, Bun and custom scripts.

    Deployments

  • Deploy script editor

    Versioned script with variables such as {RELEASE}, {COMMIT} and {BRANCH}.

    Deployments

  • Atomic releases

    Build into releases/<id>, switch the current symlink, keep shared folders such as uploads.

    Deployments

  • Zero-downtime restart

    Graceful reload for PM2, systemd or containers after a health check.

    Deployments

  • Environment variables

    Per-environment editor with masked values and change history.

    Deployments

  • Health-checked deploys

    The deploy fails and traffic stays on the old release if the HTTP or TCP check fails.

    Deployments

  • Deploy notifications

    Slack, Discord and email on start, success and failure.

    Deployments

  • Pre- and post-deploy hooks

    Migrations and cache steps, with a warning that rollback does not undo migrations.

    Deployments

  • Scheduled deployments

    Deploy at a set time or inside a maintenance window.

    Deployments

  • Maintenance mode

    One-click maintenance page per site.

    Deployments

  • AI deploy config generator

    AI

    Writes the deploy script, process config and Nginx block for the detected framework; fully editable.

    Deployments

  • Release history

    Who deployed, when, which commit, duration and result.

    Releases and rollback

  • One-click rollback

    Back to any of the last N releases.

    Releases and rollback

  • Staging to production promotion

    Promote the exact tested artifact, not a rebuild.

    Releases and rollback

  • Release diff

    Commits, env and config changes compared with the live release.

    Releases and rollback

  • Deploy markers on charts

    Every metric chart shows when releases went out.

    Releases and rollback

On the roadmap · 15 more
  • Approval gatesProduction deploys need a second person's approval.
  • Deploy freeze windowsBlock deploys during set periods such as launches or holidays.
  • Multi-server deployDeploy one app to several servers behind a load balancer, in order.
  • Rolling, blue-green and canaryRelease strategies with traffic weights.
  • AI pre-deploy risk check AIReads the diff since the live release and rates risk (migrations, env changes, dependency bumps) with reasons.
  • AI natural-language deploy AI"Deploy api to staging, run migrations, then tell me if it is safe for prod."
  • Automatic rollback on bad metricsCompares error rate, latency and memory for 10 minutes and rolls back when thresholds break.
  • AI release notes AIReadable notes for each release from commits and pull request titles.
  • AI regression detector AILinks a post-deploy rise in errors or latency to the release and the likely commit.
  • Pull request previewsEach pull request gets pr-123.preview.yourdomain with SSL.
  • Preview link on the pull requestThe URL and status are posted as a PR comment.
  • Automatic cleanupRemoved on merge or close, or after a set expiry.
  • Resource capsCPU, RAM and count limits per app.
  • Sanitized database copiesPreview databases with personal data masked.
  • AI preview reviewer AISmoke-tests key pages of each preview and comments screenshots and errors on the PR.

Domains, DNS and SSL

Certificates, proxies and DNS without leaving Orchec.

  • Domains and aliases

    Several domains per app, with a canonical www or bare domain.

  • Redirects

    301 and 302 rules, HTTP to HTTPS.

  • Let's Encrypt certificates

    HTTP-01 and DNS-01 (wildcards), renewed automatically.

  • Custom certificates

    Upload your own, with expiry alerts.

  • Proxy config editor

    Nginx or Caddy config, tested before reload.

  • Config preview and auto-revert

    Shows the diff; reverts if the site fails its health check within 60 s.

  • Cloudflare DNS

    Manage records without leaving the panel.

  • DNS propagation checker

    Confirms records resolve before a certificate is requested.

  • Password and IP protection

    HTTP basic auth or IP allow list for staging sites.

  • AI DNS and SSL troubleshooter

    AI

    Explains why a certificate fails (wrong A record, CAA, Cloudflare proxy) and offers the fix.

On the roadmap · 4 more
  • More DNS providersRoute 53, DigitalOcean, Hetzner DNS and Bunny DNS.
  • Multi-tenant domainsMany customer domains on one app with on-demand certificates.
  • CDN cache purge after deployCloudflare and Bunny purge on release.
  • AI proxy config writer AI"Proxy /api to port 4000 with websockets and 50 MB uploads" becomes a validated Nginx block.

API, CLI and integrations

Everything you can click, you can call.

  • REST API

    Every action in the UI is available through the API.

  • Scoped API tokens

    Tokens limited to projects, servers and actions, with expiry.

  • Outgoing webhooks

    Events for deploys, alerts and server changes.

On the roadmap · 6 more
  • Command-line toolA Rust CLI for deploy, logs, ssh, env and rollback.
  • GitHub Actions and GitLab CIOfficial actions and templates that trigger deploys.
  • AI from the CLI AIorchec ask "why is prod slow?" answered in the terminal.
  • Terraform and OpenTofu providerManage servers and apps as code.
  • Plugin SDK and marketplacePlugins in Rust or WASM run sandboxed with declared permissions.
  • Mobile appDeploy, alerts, restarts and metrics on the phone.

More of Orchec

Be first in when Orchec opens.

Join the waitlist for an early invite, or book a demo and we’ll walk your team through it on your own stack.

Join the waitlistBook a demo