Features

Hosting and deploys

• Server-side codeRun an app in any language, with or without a Dockerfile.
• Git hostingPush to deploy. Every app's code is a plain Git repository you own.
• GitHub copyKeep a copy of every app's code on GitHub, in step both ways.
• Preview deploymentsTry a change at its own address, with its own database, before it goes live.
• Health-checked deploymentsNew versions go live only once they answer, and can be rolled back.
• Sleep and wakeIdle apps sleep and wake on the next visit, so small tools cost nothing to keep.
• Always onKeep an app running at all times, for live connections and long streams.Starter and up
• Public pagesChoose which pages anyone can open, for websites, forms and portals.
• Edge cachingPublic pages are served from the cache, even while the app sleeps.

Sign-in and access

• Team sign-in and access controlYour team signs in with a passkey or an emailed code. You choose who opens each app.
• Customer sign-inLet customers sign in to a portal, invited or open to sign-up.
• Single sign-onYour people sign in through your own Microsoft, Google or other provider.Business and Agency
• App-to-app callsApps call each other securely, with no tokens to set up.

Data and files

• Postgres databaseEvery app gets its own PostgreSQL database, backed up continuously.
• Shared databaseKeep customers, products and prices once, read by every app that needs them.
• Key-value storeFast counters, short-lived caches and locks for each app.Starter and up
• File storageStore uploads and documents for each app, read through short-lived links.
• Virus scanningEvery upload is scanned, and infected files are quarantined.
• Video hosting and playerUpload video and audio once. It plays in every browser, private or embedded.
• Database access for agentsYour coding agent can read and change app data, with a confirm step for big changes.

Automation

• Scheduled jobsRun code on a schedule, in your time zone, with run history.
• Durable workflows with retriesMulti-step automations that retry failed steps and pick up where they stopped.
• Workflow diagramsSee each workflow as a diagram, lit up with its real runs.
• Approval stepsA workflow waits for a person to approve before it carries on.
• Webhook ingressReceive events from other systems, checked, stored and replayable.
• SecretsAPI keys and passwords your apps use, which no agent or log ever sees.
• Transactional emailSend email from any app with no setup, or from your own domain.

Domains and security

• HTTPS on every appEvery app and every address is served over HTTPS, with certificates renewed for you.
• Custom domainsPut any app on your own address, like portal.yourcompany.com.Starter and up
• Your own subdomainApps on a paid plan get addresses under your business's own name.Starter and up
• Business-wide domainAdd your domain once and every app gets its own address on it.Starter and up
• App isolationEach app runs in its own sandbox, reaching only its own data.
• Web protectionSecurity headers, forgery checks, rate limits and bot challenges on every app.
• Secret scanningA push holding an API key or password is rejected before it lands.

Monitoring

• Log searchSearch and filter everything your apps print, as it happens.
• Error trackingErrors grouped, counted and marked resolved, from any Sentry SDK.
• TracingA step-by-step timeline of every request, from the app's code to each query and call out.
• Failure alertsHear about failed deploys, failing workflows and other problems by email, Slack or webhook.
• Audit logChanges to people, apps, secrets and settings are recorded, with export.

Backups and ownership

• Backups and restoreEvery database is backed up continuously and kept 30 days.
• Restore drillsBackups are restored into a test copy every week, and you can read the report.
• Code and data exportTake every app's code and data with you, in standard formats.
• Bring your own storage and backupsKeep files and a second copy of every backup in your own bucket.Business
• Bring your own logsSend every log line to Datadog or any service you already use.Business and Agency

For coding agents

• Agent skillOne address teaches any coding agent how to build and deploy on Whisk.
• Whisk CLIThe command line your agent uses: sign in, check, deploy, read logs.
• Local developmentRun an app on your laptop exactly as it runs on Whisk.
• Assistant connectorUse Whisk from ChatGPT and Claude: check apps, logs and runs by asking.
• App templatesStarter apps in TypeScript, Python and Go, with everything already wired up.

Businesses and agencies

• Agency accountsBuild and run apps for your clients, each in a business of its own.Agency
• Usage and allowancesSee what each app uses against your plan, with warnings before any limit.

Built on tools you already know

Whisk is put together from well-known open-source projects and open standards. The CLI, the whisk.yaml format, the agent skill and the app templates are open source under the MIT licence: whisk-hosting/cli on GitHub.