For builders
Ship product instead of rebuilding ingress, identity, and observability.
CITRICLOUD
Platform features
A complete operating system for modern SaaS — security and delivery included.
Platform primitives
Secure, repeatable delivery by default.
For operators
GitOps, status, and defaults that reduce heroics.
For security
Edge and identity controls that travel with every hostname.
Build product, not plumbing
GitOps, identity, and edge stay in the platform while your team ships features.
GitOps delivery
Declarative cluster state with Argo CD. Every change is reviewable, reversible, and auditable.
- PR-based promotions
- Drift detection
- Environment overlays
Edge ingress
Traefik routes with TLS, WAF chains, and HSTS so public apps inherit SOC2-minded controls by default.
- Automated certificates
- Middleware chains
- Host-based routing
Unified identity
Keycloak realms plus Authelia 2FA for human access — service accounts for automation.
- Operator 2FA
- Tenant SSO options
- Audit-friendly auth events
Marketplace catalog
Provision chat, forms, automation, and data tools into isolated namespaces in minutes.
- Curated apps
- Tenant isolation
- Lifecycle upgrades
Observability stack
Metrics, logs, and traces wired together for end-to-end incident response.
- Unified dashboards
- Alert routing
- Faster MTTR
Operator APIs
Stable endpoints at api.citricloud.com for billing, provisioning, and tenant workflows.
- Automation-ready
- Tenant workflows
- Billing hooks