One account per person
Every operator has their own account. Organization access is invited, role-scoped, and removable without sharing a company password.
Nothing for you to patch. Nothing anyone else can reach.
Codara owns the servers, the operating system and the certificates. You own the app. Every request is scoped to your organization, and every deploy leaves a record you can read.
console.codaracloud.com
your-org
Your organization
platform-api
postgres
volumes
another-customer
Not reachable
their-api
their-db
their-jobs
Every request and every lookup is scoped to your organization. Reserved machines add a second boundary underneath.
Access, runtime, and data.Never one shared boundary.
A hole in one layer should not hand over another customer's app, Codara's own systems, or every database password you have.
Credentials stay in the app
Applications receive service-specific runtime credentials. Secrets are not sent to the browser or copied into unrelated environments.
Your services reach only yours
Workloads, networking, databases, and storage are attached through explicit project and environment boundaries.
Every deploy keeps its receipt
A deployment keeps the repository, commit, environment, actor, status, and release output together for investigation.
Visible changes
Activity and deployment history make operational changes understandable instead of burying them inside opaque automation.
Machines of your own (Enterprise)
You can reserve machines that run nothing but your own services, with capacity sized for your app rather than a sales tier.
An attack must not becomea purchase order.
Fixed prices only work if abusive traffic cannot buy infrastructure on your behalf. The platform treats attack load as a security event, not as demand.
Edge first
Codara product endpoints run behind Cloudflare. Hosted apps are marked protected only after their hostname is enrolled, never inferred from a badge.
Traffic cannot buy servers
Autoscaling responds to resource pressure and stops at your plan's replica limit. Raw request count cannot create unlimited replicas.
Attack traffic stays separate
Mitigated attack traffic belongs in security telemetry, not in ordinary customer usage or a surprise invoice.
Your app sits behind the edge
Onboarding validates edge TLS and origin routing before an app is represented as shielded.
Edge traffic
Attack burst, filtered before your service
Your bill
The same before, during, and after
€5.00/month
Shared machines.Nothing shared between apps.
Sharing machines is only safe when every request and every lookup is scoped to your organization first. Reserving machines of your own changes where the work runs as well.
Who can sign in
Sign-in, your organization's membership, roles and plan decide which resources a request is even allowed to name.
Where your app runs
Each environment runs in its own isolated space with its own network rules and capacity limits, so a running service cannot reach past it.
Your database and files
Databases, roles, credentials, attached disks and backups are separate resources you can see, not one shared secret behind the whole app.
Dedicated machines (Enterprise)
Reserved machines for your organization, so no other customer's app is ever scheduled beside yours.
No badge theater.Only operated controls.
Codara Cloud publishes the controls it actually operates and does not claim a certification before it is earned. If your buyer sends a questionnaire, an engineer answers it with an architecture review and a written isolation plan.
Report security issues to cloud@codaracloud.com.
Audit evidence
Activity is linked to actors and resources.
Reviewable access
Membership and roles have an explicit owner.
Managed TLS
Certificate state is visible and renewable.
Recoverable releases
Failed platform releases stop and roll back.
Infrastructure
Infrastructure you can name.Not a hyperscaler reseller.
Codara runs its own Kubernetes platform on Hetzner Cloud in the European Union, with Cloudflare at the edge.
Hetzner Cloud
Helsinki, Finland
Cloudflare
DNS, edge and R2 backups
Kubernetes
Operated by Codara
PostgreSQL
CloudNativePG operator
OCI images
Built with BuildKit
You do not have to set any of this up.
Every protection on this page, except dedicated machines (Enterprise), is on from your first deploy, on every plan. There is no security tier to buy and no checklist to work through.