deploy · protect · relocate — on any VPS

Servers that can't be held hostage.

Push to deploy through a managed Railpack → Docker → Traefik pipeline, run managed databases with automated restore-drills, and capture the whole box — brain, every database, volumes, config — into one encrypted image you can restore, clone, or relocate to a fresh VPS (new IP) in one click. Your data, your bucket, your exit — always.

$ curl -fsSL https://get.hostssh.com | sh
// one-click deploys — Railpack engine// restore-drills · proven round-trips// encrypted · your bucket
hostssh — migrate
$ hostssh migrate prod --new-ip auto
→ capturing brain · 14 databases · volumes · config …
image sealed & encrypted → r2 · 1 snapshot
→ provisioning fresh VPS (Ubuntu 24.04 + Coolify) …
restored · 14/14 databases · row counts match
IP rewritten 31.220.104.211 → 31.220.104.223
Traefik routes re-bound · TLS re-issued · health 200
migration complete in 4m 12s
$
two ways to use it

A hosting platform — and an engine you can license anywhere.

The same control plane runs our managed hosting and licenses onto any VPS you already own. Both deploy your apps, protect your data, and keep it portable — never trapped.

Host-first

Managed hosting, un-trappable by design

Buy a managed VPS from us and the whole stack is baked in: push-to-deploy, managed databases, backup, clone and one-click relocate. Portability on by default — the no-lock-in differentiator.

Provider-agnostic

License it for any VPS you already run

Install the agent on Hostinger, Hetzner, DigitalOcean, Vultr, AWS or bare metal. License-gated, fleet aware, and tied to no provider — you get the deploy pipeline, restore-drills and painless DR anywhere.

the wedge

Your panel backs up a database.
Not your volumes. Not your IP.

Most panels stop at a SQL dump. Provider snapshots give you a disk image on a new IP — which the panel promptly breaks. There's no first-party way to move a whole box. That's the gap HostSSH fills.

What you get today

  • Database-only backups — volumes, uploads & certs left behind
  • Manual migration: copy DBs + volumes by hand, hope it works
  • New VPS = new IP → stale domains & connection strings
  • Backups you've never once tried to restore

What HostSSH does

  • Captures the whole server: brain, every DB, volumes, system config
  • One encrypted, portable .hsi image — restore, clone, or relocate
  • Rewrites the IP everywhere it hides — the box just works on arrival
  • Restore-drills prove the backup actually restores — automatically
the deploy pipeline

Push code. We build, ship and route it.

A managed Railpack → Docker → Traefik path takes your repo to a live, TLS-terminated URL — no Nix, no Dockerfile required, no hand-wired reverse proxy.

step 01 — railpack

Detect & build

Railpack inspects your repo, picks the runtime and produces a lean, reproducible OCI image — Node, Python, Go, Rust, static and more. No Dockerfile to maintain, no Nix to learn.

// buildpacks without the lock-in
step 02 — docker

Run & supervise

The image runs as a supervised Dockercontainer with health checks, env & secret injection, attached volumes and zero-downtime rollouts you can roll back in one click.

// versioned, reversible deploys
step 03 — traefik

Route & secure

Traefikbinds your domain, issues and renews Let's Encrypt TLS, and load-balances traffic. And because routes are declarative, a relocated box re-binds them automatically.

// automatic HTTPS, every service
the whole platform

Every surface. Including the one in the name.

From the first deploy to a 3am disaster recovery — capture, restore, relocate, provision and prove it, all from one control plane or one Go binary.

[ deploy ]

One-click deploy pipeline

Railpack builds it, Docker runs it, Traefik routes it. Push to ship, with health checks, secrets and one-click rollback.

[ databases ]

Managed databases

Provision Postgres, MySQL or Redis in a click — with connection strings, scheduled backups and point-in-time-style restore wired in.

[ capture ]

Full-server capture

The whole box — Coolify brain & master key, every database, Docker volumes, system config & sidecars — not just a SQL dump.

[ drills ]

Restore-drills & backup health

We restore your backups into a throwaway sandbox on a schedule and verify them to the row — so you know recovery works before you need it.

[ relocate ]

Automatic IP-rewrite

A deterministic pass flips every public reference; internal services ride a stable WireGuard overlay — so a moved box just works.

[ provision ]

Provisioning queue

Spin up targets across Hostinger, Hetzner, DigitalOcean, Vultr or AWS from one queue — or bring your own machine and get every feature.

[ crypto ]

Encrypted, your bucket

Images sealed before they leave the host. R2, S3, MinIO, B2, Wasabi, SFTP or local — you own the storage, zero-egress restores.

[ license · fleet ]

License-gating & fleet awareness

ed25519 license tokens unlock features per tier; the control plane keeps every agent and server in one fleet view — even across providers.

[ cli · mcp ]

CLI & MCP for AI agents

One Go binary drives everything; an MCP server lets your AI agents deploy, back up, clone & migrate just by asking.

// see them all on the features deep-dive →
not vaporware

Built on an engine that already does this.

A real capture → restore round-trip across a live fleet: a whole data box cloned onto a fresh server, every database verified to the row — the same drill we now run for you on a schedule.

14/14
databases restored
100%
row-count match
1
command
pricing

Per fleet. Bring your own bucket.

You pay for the software; storage stays on your own R2/S3/B2. No surprise egress, no data hostage — emergency restores work even on an expired license.

Solo
$29/mo
One server, fully protected.
  • 1 server
  • Capture · restore · relocate
  • Restore-drills
  • BYO R2/S3 storage
  • Community support
Team
$99/mo
A small fleet, with teammates.
  • 3 servers included
  • 5 seats
  • MCP + AI deploys
  • Keep-all retention
  • Email support
Business
$349/mo
Production fleets that must not go down.
  • 10 servers included
  • 10 seats
  • Priority restore
  • Audit log + RBAC
  • Priority support
MSP · White-label
$1,290/mo
Resell HostSSH under your own brand.
  • 50 servers included
  • White-label brand + domain
  • Per-client orgs
  • Resold-VPS margin
  • Slack / PagerDuty
Enterprise
Custom
White-label, self-hosted, SSO, and custom terms.
  • Unlimited servers
  • White-label + custom domains
  • Sub-accounts / org hierarchy
  • Self-hosted control plane
  • SSO / SCIM
  • SLA + dedicated support
// overage billed per server beyond the included count · full breakdown on the pricing page →
install in one line

Load the agent on any VPS.

One command installs the agent, prompts for your license key, and unlocks the deploy pipeline, managed databases, backup, clone, relocate & Web-SSH — on any provider.

$ curl -fsSL https://get.hostssh.com | sh
early access

Stop dreading the migration.

HostSSH is in private build, dogfooded on a real production fleet. Get on the early-access list and we'll bring you in.

// status: private beta · engine proven · platform in build