Everything DevOps runs on, in one place
Build, deploy, watch and fix from one self-hosted platform. Every module shares projects, roles, secrets and the audit log.
One short file builds, tests, scans and ships
Put .opsnexus.yml in your repository. Agents check out the code, run each stage and stream the log back live. Production waits for someone to approve it.
- YAML, Freestyle and multibranch jobs with parameters, schedules, webhooks and approvals.
- 22 built-in plugins: Terraform, Helm, kubectl, Trivy, Checkov, Infracost, SonarQube, Slack, Teams and more.
- Agents for Linux, Windows, macOS and Docker with executors and labels. They only make outbound HTTPS calls.
- Already on Jenkins or GitHub Actions? Connect them and their builds show up in the same list.
name: payments-apiagent: { labels: [linux, docker] }parameters: - { name: DEPLOY_ENV, type: choice, options: [dev, staging, prod] }environment: ${{ params.DEPLOY_ENV }}env: NPM_TOKEN: ${{ secrets.npm-token }}stages: - name: Build steps: - run: npm ci && npm run build - name: Deploy when: { branch: [main, release/*] } approval: { message: Deploy to production? } steps: - uses: helm-deploy@1post: failure: - uses: slack-notify@1Know what you run and what it costs, every day
Connect AWS, Azure, Google Cloud and Oracle with read-only access. OpsNexus lists 60+ resource types and imports daily cost from each provider's billing API.
- Monthly budgets that alert at 50%, 80% and 100%.
- Forecast and savings suggestions, including idle and untagged resources.
- PDF cost reports with your logo, emailed on a schedule.
Draw the architecture. Get production Terraform.
Pick a VPC, subnets, load balancer, EC2, RDS, EKS and 30+ other services. OpsNexus checks CIDR ranges, references and AWS rules, then writes Terraform you would be happy to review.
- Plan, approve, apply on your own build agents, with encrypted state and locking.
- Secure by default. Encryption on, public access blocked, IMDSv2 required, RDS passwords in Secrets Manager.
- Download everything: the Terraform as a .zip, the JSON spec and the diagram.
Every cluster, every cloud, one view
Connect EKS, AKS, GKE and OKE through the cluster API, or run the small in-cluster agent when the API is private.
Cluster health
Nodes, workloads, restarts and pending pods, with problems found and sent to the right channel.
- → Amazon EKS, Azure AKS
- → Google GKE, Oracle OKE
- → Problems sent to the owning team
Marketplace
15 tools you can deploy in one click, pinned to a digest, with limits set and secrets kept in Vault.
- → Upgrade, roll back, uninstall
- → Live logs from the browser
- → Or export as docker-compose
Container registries
Docker Hub, ECR, ACR, Artifact Registry, Harbor, Artifactory and Nexus with tags, sizes and scan results.
- → Cleanup policies with a dry run
- → Build artifacts per run
- → Scan reports imported for you
Open any server without handing out passwords
Save a server once with a password or key from Vault. Engineers click Connect and get a full-screen terminal or Windows desktop in the browser. OpsNexus signs in for them.
- Single-use, 60-second tickets open each session. Access tokens never touch the socket.
- Remote Desktop with NLA and TLS, clipboard, Ctrl+Alt+Del and a desktop that resizes with the window.
- Host keys pinned after the first connection. A changed key blocks the session until an admin checks it.
Hear about problems before your customers do
Alert rules watch agents, pipelines and domains, and cluster and budget problems are reported too. Each alert goes to the team that owns the project and resolves itself when the problem is fixed.
- Slack, Microsoft Teams, Google Chat, email and signed webhooks, with retries and summaries.
- Uptime, SSL and domain expiry, a 14-check SEO score and website traffic without cookies.
- Dashboards and reports: 20 templates, 23 data sources, PDF, Excel and CSV on a schedule.
See it on your own pipelines.
Install the free Community edition, or book a 30-minute demo with your stack.