Kamal Cloud:
Production Servers for Kamal

Kamal does six things well: build, push, boot, health check, swap traffic, and roll back. Kamal Cloud handles everything else: server creation, firewall, SSH hardening, fail2ban, patching, backups, restore verification, team access, environment separation, and cost tracking.

We built it for our own Kamal deployments on Hetzner, to get rid of incomplete hardening checklists, untested backups, and shared SSH keys.

Kamal Cloud is a client of your infrastructure, not its owner. Servers live in your cloud account and every generated file is standard Kamal format. If you stop paying, your servers keep running and your repository still works with plain Kamal. Kamal Cloud isn't in the request path, so if it's ever down, your apps keep serving traffic.

• Locked down, and checked against the machine. Firewall, SSH, brute-force protection and updates are verified against the actual server state, not a promised checklist.
• Nothing changes until a person says so. API and CLI requests need admin approval in the browser. Advisory agents are read-only.
• Every action has a name and a price on it. Deployments, tasks, backups, restores and shell sessions record who started them, with full logs and cost attribution from your provider.

• Push to deploy on branch pushes or tags, with path filters and [skip ci] support.
• Alerts for failed deploys, tasks and backups, expiring certificates, and traffic overages, by email, Slack, Discord or webhook.
• Rollback and maintenance to any previously built version, or a maintenance mode that serves 503s.
• Backup before deletion: databases and volumes are backed up first, and deletion stops if the backup fails.

One plan: $29/month. It includes unlimited apps, environments and deployments, and a seven-day free trial.

Server costs are billed by your provider, to you, at their price. Kamal Cloud never resells infrastructure.