Ship your code,
on autopilot.

Stakpak on Product Hunt

An open source agent that lives on your machines 24/7, keeps your apps running, and only pings when it needs a human. All the upside of a PaaS, none of the lock-in.

$ curl -sSL https://stakpak.dev/install.sh | sh
trigger app-health fired at 03:14 UTC
 
API latency spike detected: p99 = 340ms (threshold: 100ms)
 
investigating root cause...
  checking app metrics   done
  checking database connections   done
  found 312 idle connections on db-prod-01
 
fixing restarting api-server...
  rollout   3/3 instances ready
  latency   p99 = 12ms
 
✓ resolved in 2m 13s. Reported to #alerts
1000+ developers use Stakpak
PaymobMistral AIWriterBreadfastOvermindReplicatedDaytonaAlpine SGHaktiv AIeVisionLuciq AIGarment.ioNawyVectaraRobusta Group

The whole product in three commands.

stakpak

You drive

Interactive TUI. Full control in your terminal.

stakpak up

It drives

Autonomous agent. Running 24/7 in the background.

stakpak autopilot status

You watch

Monitor schedules, channels, and recent activity.


Use Cases

From 3am incidents
to daily reports.

The stuff that keeps you up at night, automated, resolved, and reported before your morning coffee.

Auto-healing

Health check fails → agent finds 312 idle database connections → restarts your app → latency drops from 340ms to 12ms → Slack summary. While you sleep.

Cost Watchdog

Daily scan finds 14 idle RDS instances and 200GB of orphaned EBS volumes → generates savings report → $4,200/mo recovered before finance even asks.

Defuse Time Bombs

TLS cert expires in 6 days → auto-renews with zero downtime → you never see the page. Same for expiring secrets, deprecated APIs, and EOL runtimes.


Architecture

Single binary.
Runs on your machine.

Autopilot is a single long-running process that combines scheduling, messaging, and a local API. It installs as a system service and persists across reboots.

Works with your favorite model
Stakpak Autopilot Architecture. Single binary with three capabilities: Schedules, Channels, and Server

Trust & Security

Not another
coding agent.

Coding agents write code. Stakpak runs your apps in production, where a wrong move means downtime, data leaks, or a $50k bill. That requires a different trust model.

Network Sandbox (Warden)

Every network request the agent makes (curl, Python, MCP servers) goes through a transparent proxy with Cedar policies. Even if you get permissions wrong, the agent can't break anything.

Secret Substitution

210+ secret types detected and swapped with placeholders before the LLM sees them. Real values restored only at execution time. Your API keys and database passwords never reach any model provider.

Full Session Audit Logs

Every action, file edit, and command is logged with full context. Changes are backed up before modification, locally and over SSH. Replay any session, trace any change, roll back instantly.

Open Source & Auditable

Written in Rust, Apache 2.0. Runs entirely on your machines with mTLS encryption. No data leaves your environment. You own the agent, the data, and the trust boundary.

Put your apps on autopilot.

Install Stakpak, run stakpak init. It discovers your stack and generates APPS.md. Then stakpak up and it drives.

1
$ curl -sSL https://stakpak.dev/install.sh | sh
Install
2
$ stakpak init
Discover your stack → APPS.md
3
$ stakpak up
Autopilot, running 24/7