The platform
Everything your app needs to run, in one platform.
A platform as a service for apps built with coding agents. You push to Git; AppHaven builds, runs, secures and backs up your app, with PostgreSQL and login built in.
AppHaven
Build pipeline
- Isolated build per commit
- Container image
- Vulnerability scan
Your app
Dedicated VM- App containers
- PostgreSQL Managed
Edge
- HTTPS & certificates
- Login gate & SSO
- Custom domains
Running around the clock
- Backups
- Vulnerability scans
- Rollback to any version
- Certificate management
Your users
- Sign in once
- Reach your app over HTTPS
Backups & recovery
Your data, recoverable to the second.
Production backups are on from the first deploy. No backup jobs to schedule, no scripts to maintain, and a restore that takes your database back to exactly the moment you need.
-
Point-in-time recovery. The database's write-ahead log is archived continuously, so PostgreSQL can be restored to any moment in your retention window, like one minute before a bad migration.
-
Consistent daily snapshots. Database and volumes are captured in one atomic snapshot, so restored data and files always match.
-
Stored apart from your app. Backups and WAL are kept encrypted outside the app's environment, in a different location. A bad deploy or a compromised app can't reach them.
Vulnerability scanning
Known CVEs, caught continuously.
Every build is scanned against published vulnerabilities, and production is rescanned daily. Most vulnerabilities appear in code that didn't change, so AppHaven keeps checking after you ship.
-
Image and dependencies. OS packages in the container image, plus the lockfiles and manifests in your repository. No scanner to set up or wire into CI.
-
Actionable findings. Severity, affected package, installed version and the fixed version, with a link to the advisory. New findings are flagged.
-
Closed by your agent. Your agent reads the same findings from the CLI, bumps the versions, pushes, and the next build confirms the fix.
Authentication & access
Authentication handled at the edge.
Every app sits behind a managed login gate by default. No auth code to write, no password storage, no sessions to secure. Unauthenticated requests never reach your app.
-
Private by default. Only invited project members get through.
-
SSO with your identity provider. Google Workspace, Microsoft 365 or any OpenID Connect provider, so users sign in with the account they already have.
-
Easy integration for your app. Your app is told who is signed in with every request, so personalising it or checking permissions takes just a few lines of code.
-
Public paths, by approval. Open the whole app, or only the routes that need it, like a webhook endpoint. Opening a path always takes an admin's approval.
Previews & safe deploys
Every branch a full environment. Every deploy safe.
Push a branch and it runs as a complete preview deployment: its own VM, database, volumes and URL. Production changes only when you merge, and a deploy never takes down the running version.
-
Full-stack previews. Isolated from production and from each other, private to your team, and cleaned up when the branch is deleted.
-
Immutable images. Each commit is built once. Merging promotes the exact image your preview ran, with no rebuild on the way to production.
-
Build first, then swap. The new version builds while the current one keeps serving. A failed build never touches the live deployment.
-
Rollback by commit. Every deployment records its commit. Redeploy an earlier one and it's back fast, from the image already built.
Coding agent integration
Built for coding agents. Safe by design.
Your agent gets full visibility into builds, deployments and findings, with no path to production credentials. Code ships through your own Git release flow; changes to the platform setup come to you as proposals.
-
Claude Code, Codex and more. A Claude Code plugin and an AGENTS.md block for other agents teach them the platform, the manifest and the CLI.
-
A read-only CLI. Deploy status, build logs, crash logs, container output and vulnerability findings, all scriptable with JSON output.
-
Your agent proposes, you approve. Changes to your platform setup, like adding a database or changing who can reach the app, arrive as proposals you approve in AppHaven. Code follows your Git flow: deploy automatically when you merge to your production branch, or deploy it yourself.
-
Scoped, revocable access. OAuth login approved in your browser, scoped to your projects, and revocable in one click.
Get started
Put your app on a platform built for it.
Create your account, ask your agent to deploy, and approve the setup. Apps start at about €7.50 a month, billed per minute.