One binary. Your infrastructure. Your data.
Hezo is a single self-hosted binary with Postgres embedded - no database to stand up, and no container runtime on this machine at all when you run the agents on a managed sandbox service. Run it on a laptop, a home server, or your own cloud VPS, and point it at external Postgres or S3-compatible storage whenever you want. Everything your team produces stays on infrastructure you control.
Batteries included, swappable when you grow.
Out of the box, data lives in the embedded Postgres inside your data directory. Point Hezo at an external Postgres or S3-compatible storage when you want to - migrations carry your data forward safely either way.
- Embedded Postgres by default; external Postgres 14+ optional
- Optional S3-compatible asset storage
- Data-preserving migrations and built-in disk reclaim
- Back up one directory and you've backed up everything
You choose where the containers run.
Agents only ever work inside a container, never on your host. By default those containers run on your own machine, so the one prerequisite is a Docker-compatible runtime. Point Hezo at a managed sandbox service instead and this machine needs no container runtime at all.
- Docker, Colima, Rancher Desktop, OrbStack, and Lima all work - Hezo finds the socket itself
- On a managed service, none of the agent's work touches your machine
- Switchable either way at any time, from Settings
One click to a cloud you own.
GCP, AWS, and DigitalOcean each get a deploy button that provisions the box, issues the certificate, and boots Hezo on HTTPS. The account is yours, so the data lands on infrastructure you already control.
Or straight onto your own box.
Install the binary with one command, then run it under a systemd unit so it comes back on crash and on boot. Hezo serves plain HTTP on port 3100 - put a reverse proxy in front for HTTPS, with a working config in the docs.
Reach it without opening a port.
Put it behind Tailscale, WireGuard, a Cloudflare Tunnel, or plain SSH and your laptop talks to it over an encrypted link. Nothing has to face the public internet for you to use it from anywhere.
Updates install from inside the app.
A new version shows up in the app. Take it when you want it - Hezo downloads, verifies, swaps the binary, and restarts in place - or leave auto-update off and stay exactly where you are.
Speaks your language.
The web app runs in twelve languages, picked up from your browser on first run. Date and currency formats are chosen separately, so ISO dates alongside German prose is a valid combination.
Keep exploring
All features →Own the whole stack in one command.
Open localhost:3100 - setup walks you through the rest.