Open source · Apache-2.0 · Self-hosted

Veltrix Community Edition

Security-as-Code, self-hosted and free. The open-source core of the Veltrix platform — a mandatory change pipeline for security configuration, plus the app engine that lets any security tool plug into it. Run the whole thing on your own infrastructure, at no cost.

Get it on GitHub Quickstart

Every change flows through one auditable pipeline

Nothing reaches a production security tool by hand. Apps define what gets configured; the pipeline owns how it is safely delivered, verified, and rolled back.

author → validate → approve → deploy · canary / blue-green / rolling → monitor → drift-detect

The full pipeline engine

Validation, human-in-the-loop approvals, canary / blue-green / rolling deploys, health checks, automatic rollback, and drift detection — the premium delivery features, included and free.

App & plugin engine

Install apps that wire any security tool into the pipeline, with a typed SDK for JavaScript and Python, the Configuration Canvas, version control, and tenant-isolated sandboxes to develop against.

Yours to run

Self-host with Docker Compose or Helm. Local email + password auth by default, optional OAuth/OIDC SSO, RBAC, and API keys. Apache-2.0 licensed — no seat limits, no telemetry, no phone-home.

What's in the Community Edition

The delivery capabilities most vendors put behind an enterprise tier — canary, blue-green, drift detection, approval workflows — are free here. They are the product, not an upsell.

Included — free, self-hostable Hosted commercial add-ons
Pipeline engine (validate → approve → deploy → drift) Billing, subscriptions, usage metering, trials
App / plugin engine + SDKs (JavaScript, Python) Multi-tenant SaaS isolation
Configuration Canvas + version control + approvals Platform-admin & MSSP operator portals
RBAC, local auth (+ optional OAuth/OIDC), API keys BYOL billing, managed cloud provisioning
React design system, Docker Compose + Helm, core docs SLA-backed support & managed upgrades

Up and running in one command

The quickstart builds the images, generates secrets, migrates the database, and boots the stack — printing the generated admin login on first run.

# clone and boot
git clone https://github.com/captivatortechnologies/veltrix-community.git
cd veltrix-community
./scripts/quickstart.sh     # or:  make quickstart

# → Web UI  http://localhost:3000
# → API     http://localhost:5000

Prefer to drive it yourself? cp .env.example .env, then docker compose up -d with a manual prisma migrate deploy. Every environment variable is documented in the repo's docs/CONFIGURATION.md.

Built on a modern, boring stack

Backend

Fastify 5 · TypeScript · Prisma 6 · BullMQ

Frontend

React 18 · TypeScript · Tailwind CSS

Data

PostgreSQL 16 · Redis 7

Deploy

Docker Compose · Helm (Kubernetes)

Self-host it, or let us run it

Community Edition

Best when you want full control, data residency on your own infrastructure, and zero licensing cost. You own the ops: deployment, upgrades, backups, and scaling.

  • ✓ Free and open source (Apache-2.0)
  • ✓ The complete change pipeline & app engine
  • ✓ Community support via GitHub issues
Start self-hosting →

Hosted & Managed

Best when you'd rather not run infrastructure. We handle hosting, multi-tenant isolation, upgrades, and SLA-backed support — plus the platform-admin and MSSP operator tooling.

  • → Fully managed, always up to date
  • → Multi-tenant, billing, and MSSP features
  • → SLA-backed support
See hosted pricing →

Same core, same apps. Move between them without rewriting a thing — apps from the open-source apps repository install on either.

Bring Security-as-Code in-house

Clone the repo, run the quickstart, and put your first security configuration change through a real approval-and-canary pipeline in minutes.

View on GitHub Read the Docs Build an App