Logo

The Platform

Tapitalee is built on one premise: that application teams shouldn't need to become AWS experts to deploy production software.

Everything on this page is a consequence of that premise — the choice of ECS Fargate over Kubernetes, the decision to secure Add-Ons inside of Apps, the browser terminal so developers never need IAM credentials, the scale-to-zero so idle environments cost nothing.

Here's what the platform actually does.

ECS Fargate, not Kubernetes

Kubernetes is powerful. It's also a full-time job. ECS Fargate gives you container orchestration without the cluster to manage — no nodes, no control plane, no ops overhead.

No cluster to manage

AWS provisions and manages the underlying compute. You never patch a node or upgrade a control plane.

Scale to zero

Environments that are switched off run at zero containers. No base cost. Scale back up on demand.

Per-second billing

Fargate charges by the second. Combine with spot instances for up to 70% savings on non-critical workloads.

Autoscaling & Cost Control

Includes an AWS Cost Report generator, and a real-time cost estimator.
Mix and match spot instances with on-demand.
Scale containers up and down automatically based on CPU usage.
Because Tapitalee deploys with ECS Fargate, there are no base AWS costs when you scale to zero.
Cost Report Screenshot Autoscaling Screenshot

Add-Ons secured inside Apps

The decision to scope Add-Ons inside an App isn't just organisation — it's the security model. Databases, queues, and custom IAM policies are network and permission isolated to exactly the apps that need them.

Quickly add RDS databases (Postgres, MySQL), ElastiCache (Redis), integrations, and more.
Tapitalee takes care of the VPC, security groups, and IAM policies for you, limiting access to only the apps they're assigned to.
Share an Add-On across multiple apps, or keep it private to one. Either way, no other app gets access unless you explicitly grant it.
Add-ons Screenshot
Time-saving Add-ons Screenshot
Managed or custom IAM policies (eg. for Bedrock)
S3 buckets with optional public read-only access.
EC2 instances with same permissions as app containers.

Browser terminal — no IAM credentials needed

The browser terminal exists because the alternative — giving developers AWS IAM credentials — creates a sprawling access control problem. Instead, Tapitalee brokers access through its own authentication.

Browser Terminal Screenshot

Fast Console Access

Use the web-based terminal for instant access, even from your phone.
Or, spin up a shell console with the CLI.
No need to assign AWS IAM credentials to developers.
No need to install the AWS toolchain.
Run psql, mysql, redis-cli, and more, with zero setup and the same permissions and network access as the app.
All browser terminal sessions are recorded — full replay available to support security audits and compliance requirements.

Preview Apps

Spin up a new app every time a pull request is opened.
Copy an existing app's settings as a template.
Expires after a set period, or when the PR is closed.
Preview Apps Screenshot
Metrics and Logs

Metrics and Logs

Tapitalee pulls in only the CloudWatch metrics and logs from AWS.
View recent activity for your apps and add-ons in one place without having to log in to AWS.
No separate observability subscription required — it uses the logging and metrics your AWS account already provides.

Built-in integrations

Sidecar containers run alongside your app containers — same task, same network, zero configuration overhead.

Datadog

Enable the Datadog sidecar and your containers automatically ship metrics, logs, and traces to your Datadog account — no agent installation, no custom Dockerfile changes required.

Monitoring, log management, and APM, running as a first-class sidecar alongside every container in the task.

Cloudflare Tunnel

Expose your app to the internet through a Cloudflare Tunnel sidecar — no inbound firewall rules, no public load balancer required for internal or preview environments.

Useful for staging environments, internal tools, or anywhere you want Cloudflare's network in front of your app without the ALB cost.

Also included

More of the advanced features inside Tapitalee.

Zero-downtime Deploy

Load balancer with ECS Fargate means no downtime during deployments. Combine with custom health checks and automatic TLS certificates.

Gated Deployments

Require manual approval from specific team members before deploying to production. The deployment pipeline pauses and waits.

GitHub Actions & CLI

Deploy from your terminal with the Tapitalee CLI, or wire it into your existing GitHub Actions workflow. Either way, no AWS credentials required in CI.

Ask AI

Exports an encoded transcript of your infrastructure directly to Claude, for an AI summary, so you can ask questions about it.

Multi-region & Multi-account

Deploy apps across multiple AWS regions and AWS accounts from a single Tapitalee organisation. Higher tier plans support multiple accounts.

Fine-grained Access Control

Control which team members can deploy, access the console, or manage add-ons — at the app level. Developers only see what they need to.

Ready to deploy?

Connect your AWS account in minutes. No Kubernetes expertise required.