MeerkatMeerkat

Questions

The ones people actually ask.

If something here is unclear, or you have a question we haven't answered, say so and we will add it.

Getting started

Where does my code live?

In your own account, from the first minute. We connect through an app you install and can revoke, and we never host your repository. GitHub is supported today, with GitLab and other hosts on the way. If you stop paying us tomorrow you still have a working, buildable app.

What's actually running underneath?

Containers on Kubernetes, with ArgoCD reconciling what you approved. You never have to touch any of it, and you never have to learn it to ship. The surface you work with is a repo, a pull request and a promote button, and the console will show you the layer underneath whenever you want to look.

What if my repo has no Dockerfile?

Then the scaffolding PR writes one for you: multi-stage, slim runtime, non-root, no build toolchain in the final image, along with the build workflow, deploy manifest and a declaration of the keys your app may read. You review it like any other pull request.

What is a Rough Cut environment?

Staging in miniature: a small environment with its own namespace and resources, running the same pipeline and the same scanning as production, meant for an idea you are still testing. Its releases merge on the automated scope guard rather than waiting on an approval, so iteration stays quick. Each one is a flat $9.99 a month, with no compute metering, and your plan caps how many run at once: one on Growth, three on Scale, and whatever a custom contract says.

Security

What do you check before something ships?

Two passes. Before the build, your repo is scanned when it onboards and again on each build: credentials committed to source, Dockerfiles that pipe a downloaded script into a shell, base images pulled from registries outside our allowlist, and package manifests with install hooks that reach the network or dependencies sourced outside the registry. The CLI runs the same checks locally, so you or your agent see the finding before pushing. After the build, the image goes to Google Artifact Registry, whose CVE scanning inspects every layer against the vulnerability database, and the platform team works the findings. Images are digest-pinned on the way out, so the thing scanned and reviewed is the thing that runs.

How do secrets work, exactly?

Values are stored encrypted on the platform and injected at runtime. Your repo declares which keys are permitted, and that declaration is an allowlist: a key it never declared is unavailable even if someone sets one. Nothing sensitive is ever committed.

Is my app isolated from other customers?

Yes. Every tenant gets their own namespaces with network policy, resource quotas and separate credentials, and cross-tenant access is not a setting anyone can misconfigure into existence.

Working with agents

Can my AI agent break production?

It can open pull requests, which is exactly as much power as any teammate has. Promotion needs an approval, releases are diffs, and rollback is one action. The CLAUDE.md in the repo keeps its suggestions inside the platform's architecture in the first place.

Can I just have my agent deploy to my own cloud account?

You can, and it will often work. The trouble is what you cannot see: instances sized for nothing in particular, no quotas, no probes, no alerting, and a setup nobody can maintain in three months. Going through us costs you a base fee and gives you sizing, scanning, review and a rollback path that were decided before your agent typed anything.

Do I have to use the CLI?

No. Every action exists in the console and in the CLI, so you can drive the wizard, live in your terminal, or let Claude Code run the commands for you. Your teammate can pick a different surface on the same app.

Money and leaving

What does it cost to start?

Plans start at $25 a month with an included compute quota, and there is a 14-day free trial with no card. Managed databases, domains, object storage and logged support hours are metered per unit at the rates shown in your console, Rough Cut environments are a flat $9.99 each per month, and compute past the quota is billed at period end.

What happens if I outgrow you?

You take the repo, the image and the manifests. All standard, all already in your possession. We would rather be left cleanly than hold anyone hostage.

Still deciding?

The trial needs no card, and nothing lands on your default branch until you merge it.