Provision servers on any cloud, install your stack in one click, deploy from Git with zero downtime, and watch every metric and log. One place, for your whole team.
Launching soon, free for one server.
Runs on the clouds, systems and stacks you already use
One control plane
Most teams run a server panel such as Ploi, plus SSH, a folder of scripts and three monitoring tools. Orchec covers all of it, with one login, one permission model and one audit trail.
Today
With Orchec
Platform
Servers and installs
Create servers on Hetzner, AWS, DigitalOcean and five more clouds, or connect one you already have. Install Nginx, PHP, Node.js, PostgreSQL and Redis from tested manifests that are safe to run twice.
Explore servers and installsAI copilot
Ask about any server, log or chart. When something needs to change, the copilot writes a plan with a diff and a risk level, and waits for your approval.
Explore the AI copilotDeploys
Every push builds a new release, passes a health check and switches over at once. Roll back to any recent release in one click.
Explore deploysObservability
Charts refresh every two seconds while you watch, logs stream as they happen, and alerts reach email, Slack, Discord or Telegram.
Explore observabilityDatabases
PostgreSQL, MySQL, MariaDB and Redis with a data grid, a read-only SQL console and AI that writes the query. Scheduled backups to your own storage, with restores you can test.
Explore databasesSecurity
Roles scoped to projects and servers, secrets masked until someone with permission reveals them, and an audit log of every change.
Explore securityOrchestration
Tag servers by environment, run scripts across many at once with output per server, and manage workers, cron and containers from one place.
Explore orchestrationFiles and terminal
Browse, edit and upload files in a desktop-style explorer, and open a terminal through the agent. No public SSH port, and people only see the paths their role allows.
Explore files and terminalHow it works
Paste one install command on any Ubuntu or Debian server, or let Orchec create one for you. A small Rust agent connects back over port 443 and does only what a person or plan allows.
Outbound only
The agent opens one encrypted connection to Orchec on port 443. Servers need no open inbound port, and Orchec keeps no SSH keys for them.
Typed operations
The agent runs a fixed list of typed, allow-listed operations. Nothing sends it a raw shell string, and that includes the AI.
Signed and checked
Agent releases are signed and update themselves. The install script is checked against its published SHA-256 before it runs.
Safe by design
Every change follows the same four steps, whether you click a button, call the API or ask the copilot. Nothing changes a server without a plan someone can read first.
A teammate or the AI writes the change as a plan: what runs, on which servers, with a diff and a risk level.
risk: read · change · destructive
Reads run freely. Changes need a confirm. Destructive actions need a second person.
approved by maya@kestrel.dev
The plan runs as a durable job through the agent, with live output and only the asker’s permissions.
job_01J… · streaming
Orchec checks the result against the plan’s success test. Every step lands in the audit log.
p95 182 ms · passed
The dashboard
These are real screens from the Orchec dashboard, running on sample data. Book a demo and we will walk you through the rest.
Any cloud, any region
Create servers on 8 clouds from one form, with the monthly price shown first, or bring any Ubuntu or Debian machine with one command. Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, Debian 13, on x86_64 and arm64.
On the roadmap: Google Cloud, Azure, OVHcloud, Oracle Cloud, Proxmox and on-prem.
API, MCP and CLI
Everything you can click, you can call. Wire Orchec into CI, your own tools or an AI agent, and every call goes through the same permissions and audit log as the dashboard.
$ curl -X POST https://api.orchec.com/api/v1/apps/app_storefront/deployments \ -H "Authorization: Bearer $ORCHEC_TOKEN" \ -d '{"ref":"main","environment":"production"}'{ "id": "dep_01JB7Q", "status": "queued", "job": "job_01JB7Q", "stream": "deployment:dep_01JB7Q"}// Claude, Cursor or any MCP client{ "mcpServers": { "orchec": { "url": "https://api.orchec.com/mcp" } }}> Which apps still run on Node 18?✓ 3 apps: billing-api, collector, admin. Want a plan to move them to Node 24?$ orchec deploy storefront-web --env production --wait→ Building a1f9c2e on web-01, web-02→ Health check passed: 200 in 84 ms✓ Live in 41 s · rel_042 · zero downtime$ orchec logs storefront-web --follow --grep "500"10:42:07 web-01 GET /api/checkout 200 182 ms$ orchec ssh web-01Connected through the agent. No public SSH port.Pricing
Free for one server. Every plan includes deploys, one-click installs, the file manager, the terminal, the API and the MCP server.
Prices in US dollars, excluding tax. Enterprise plans are custom.
FAQ
Join the waitlist for an early invite, or book a demo and we’ll walk your team through it on your own stack.