ReBAC · MSP-ready · BYO Kubernetes · Multi-region · Scale-to-zero

Your cloud, your rules.

Effixo turns any Kubernetes cluster — yours, your customer's, or ours — into a Heroku-grade platform, with the RBAC, multi-region, and cost controls teams rebuild by hand every time.

Open the console See how it works

# ship from your terminal — onto your own cluster
$ efx apps create --name acme
$ efx svc create --app acme --name web \
      --image nginxinc/nginx-unprivileged:stable-trixie-perl \
      --port 8080/http --route 8080:/
→ live at https://<uuid>.effixo.app
$ efx svc list

# idle services sleep; the first request wakes them
$ efx svc create --app acme --name web \
      --image nginxinc/nginx-unprivileged:stable-trixie-perl \
      --port 8080/http --route 8080:/ \
      --scale-to-zero --idle-after 60
→ live at https://<uuid>.effixo.app
# 60s without traffic → sleeps: 0 pods, near-zero compute
# next request → wakes in ~2s and is served

Kubernetes is the substrate, not the platform

The layer developers actually want — app → service → secret → volume → route, team-based access, multi-region, quotas — is missing. So every org rebuilds it: months of work, a dedicated platform team, ongoing maintenance. The alternative — a managed PaaS — means lock-in, no data sovereignty, and someone else's infrastructure.

Raw Kubernetes

No notion of apps, teams, or tenants
RBAC + multi-region assembled by hand
6–12 months to a real internal platform

Managed PaaS

They own your compute
No on-prem, no air-gapped, no BYO
Expensive, bloated, not MSP-ready

Effixo

Heroku-grade DX on infrastructure you own
Multi-tenant RBAC + multi-region built in
BYO-cluster, MSP-native, deliberately lean

One control plane. Any cluster. Full tenant isolation.

A multi-tenant control plane (typed API, CLI, web UI) plus a lightweight data-plane agent that sits next to each Kubernetes cluster. Developers get self-service deploys; platform teams keep control; and your apps, data, and compute stay on your own cluster.

Register a cluster

Deploy the agent, register it as a region. AKS, on-prem Talos, or anything CNCF-conformant.

Model your org

Orgs, teams, and apps with relationship-based access control. Hard tenant isolation on every row.

Ship services

Deploy containers with secrets, persistent volumes, and routes — from the UI, CLI, or API.

The product is DevX. The cloud is a pluggable provider.

DevX is a single control plane; the substrate under it is substitutable — DevX + Azure, DevX + GCP, DevX + On‑Prem. We ship validated reference architectures (IaC + docs), not end-to-end infra or consulting. The control plane stays the same; only the substrate wiring changes.

Concern	DevX + Azure	DevX + On‑Prem
Kubernetes	AKS	Talos
Storage	Managed CSI	Ceph (replicated / RWX)
Edge / ingress	Cloudflare tunnel / Front Door	Cloudflare tunnel
Node pools	Spot pool	Bare-metal pool
Backing services	CNPG / NATS, or brokered (Azure DB)	CNPG / NATS on Ceph

Everything a team needs — nothing it doesn't

Multi-tenant RBAC

ReBAC: org → team → app → service inheritance, with hard org_id isolation.

Multi-region

Each cluster registers as a region. Deploy to the region you choose; restrict which orgs can use which.

Scoped secrets & volumes

Org-wide or app-scoped secrets and persistent volumes, with full lifecycle and clean teardown.

Zero public IP

Cloudflare Tunnel (QUIC) — no inbound ports open on your cluster. Air-gap and sovereignty friendly.

CLI & typed API

efx ships from your terminal; an OpenAPI-typed API and API keys drive everything else.

Observability

Loki/Grafana logs, CPU/memory/RPS metrics, and live deployment status out of the box.

Scale-to-zero

Services sleep when idle and wake on first request — idle apps cost near-nothing on your own cluster.

Custom domains roadmap

Bring your own hostnames and TLS on top of the per-service subdomain you get today.

Built for platform engineers and MSPs

Platform engineers

You run Kubernetes and need to hand safe, self-service deploys — with team RBAC and multi-region — to your developers, without building an internal platform from scratch.

Managed service providers

You manage clusters for many customers and need white-label, multi-tenant control across all of them — each customer fully isolated, on infrastructure they own.

Even engineers who can build this find multi-region + RBAC consistently under-planned and painful. That gap is the product.

Ship on your infrastructure.

One control plane, any cluster, full tenant isolation. Your cloud, your rules.

Open the console

Want your own cluster connected — or to deploy on Effixo's? Tell us your setup at [email protected] or @effixoapp.