The Platform
Application teams shouldn't need to become AWS experts to ship production software. Sensible defaults, conventions over configuration, the things you need close at hand.
Everything below follows from that — ECS Fargate instead of Kubernetes, Add-Ons scoped inside Apps, a browser terminal so developers never touch IAM, scale-to-zero so idle environments cost nothing.
ECS Fargate, not Kubernetes
Kubernetes is powerful. It's also a full-time job. ECS Fargate gives you container orchestration without the cluster to manage — no nodes, no control plane, no ops overhead.
AWS provisions and manages the underlying compute. You never patch a node or upgrade a control plane.
Environments that are switched off run at zero containers. No base cost. Scale back up on demand.
Fargate charges by the second. Combine with spot instances for up to 70% savings on non-critical workloads.
Autoscaling & Cost Control
Add-Ons secured inside Apps
The decision to scope Add-Ons inside an App isn't just organisation — it's the security model. Databases, queues, and custom IAM policies are network and permission isolated to exactly the apps that need them.
Browser terminal — no IAM credentials needed
The browser terminal exists because the alternative — giving developers AWS IAM credentials — creates a sprawling access control problem. Instead, Tapitalee brokers access through its own authentication.
Fast Console Access
psql, mysql, redis-cli, and more, with zero setup and the same permissions and network access as the app.
Preview Apps
Metrics and Logs
AI Security & Governance
Give AI agents the access they need — and nothing more.
A skill gives your local agents access to everything in your infrastructure. The CLI is self-documenting, and our chat bot can assist you in-browser and asks permission before making changes.
Limit tokens for AI agents, with our simplified access control system giving read-only access until you need more.
For stronger isolation, set up a second app for agent use and share the primary app's add-ons with it in read-only mode. Agents can query real data without any risk of modifying or deleting it.
Immutable backups that cannot be deleted by anyone — not even the AWS account owner. Even if an agent (or a human) goes rogue, your data is recoverable.
Built-in integrations
Sidecar containers run alongside your app containers — same task, same network, zero configuration overhead.
Enable the Datadog sidecar and your containers automatically ship metrics, logs, and traces to your Datadog account — no agent installation, no custom Dockerfile changes required.
Monitoring, log management, and APM, running as a first-class sidecar alongside every container in the task.
Expose your app to the internet through a Cloudflare Tunnel sidecar — no inbound firewall rules, no public load balancer required for internal or preview environments.
Useful for staging environments, internal tools, or anywhere you want Cloudflare's network in front of your app without the ALB cost.
Connect your application to your Tailscale mesh VPN network. Enables secure private networking from other devices on your Tailscale network into your app and its AWS resources including database.
Perfect for secure access to internal services and databases without exposing them to the public internet.
Receive notifications to a Slack channel. Get alerted about deployments, errors, and other important events directly in your team's Slack workspace.
Coming soon
Also included
More of the advanced features inside Tapitalee.
Zero-downtime Deploy
Load balancer with ECS Fargate means no downtime during deployments. Combine with custom health checks and automatic TLS certificates.
Gated Deployments
Require manual approval from specific team members before deploying to production. The deployment pipeline pauses and waits.
GitHub Actions & CLI
Deploy from your terminal with the Tapitalee CLI, or wire it into your existing GitHub Actions workflow. Either way, no AWS credentials required in CI.
AI assistance
Let Claude and other agents get a read-only snapshot of your infrastructure's state. Get an AI summary of what's running and get answers, and get help to make changes you can understand.
Multi-region & Multi-account
Deploy apps across multiple AWS regions and AWS accounts from a single Tapitalee organisation. Higher tier plans support multiple accounts.
Fine-grained Access Control
Control which team members can deploy, access the console, or manage add-ons — at the app level. Developers only see what they need to.
Cron/Scheduler
Have task-oriented containers started and tracked on a cron schedule. Run background jobs, reports, or maintenance tasks without managing infrastructure.
Utility Container Image
Comes prebuilt with all the shell tools needed to perform database migrations and other general maintenance. Ready to use out of the box.
Ready to deploy?
Connect your AWS account in minutes. No Kubernetes expertise required.