Roadmap
Where Subnomic is headed
A transparent look at what's shipped, what we're building now, and what's further out. Directions, not promises.
ShippedIn progressPlanned
Sites & services
Shipped- Static sites — a preview address for every deployment, rollback that moves a pointer, _redirects and _headers, and custom domains with certificates issued for you.
- Services — a Nitro node-server build or a Linux binary runs on a microVM of its own, sized from pico to large.
- Managed Postgres & Redis — bound to a service, with the connection string delivered as an environment variable.
- Traffic analytics — counted where the site is served: no cookie, no script, kept 90 days.
Object storage
Shipped- S3-compatible API — SigV4, path-style addressing, multipart uploads and presigned URLs, working with the AWS CLI, rclone and restic.
- Versioning & object lock — Governance and Compliance retention, and legal hold.
- Lifecycle & replication — expire old versions and copy a bucket to any S3-compatible endpoint.
- Scoped keys & share links — keys limited by bucket, prefix and action; share links you can revoke.
Container registry
Shipped- Private OCI registry — multi-arch images, robot accounts for CI, and repositories created on first push.
- Scanning & SBOMs — Trivy on every push, findings with the version that fixes them, CycloneDX and SPDX on request.
- Signing — cosign with a per-workspace key held in your own KMS, or uploaded and encrypted.
- Retention & transfers — keep-last-N and age rules, and one-off copies to and from other registries.
Runa & workflows
Shipped- Runa — an assistant with a hundred-odd tools, every step shown with its arguments, running as a scoped agent access.
- Agent access for MCP — Claude Desktop, Cursor and other MCP clients with scoped, expiring, recorded access.
- Workflows — visual graphs with approvals, resume after a crash, 109 templates, and graphs drawn from a sentence.
- AI summaries & investigations — session summaries, incident triage and postmortems, and a daily briefing.
CLI
Shipped- Sign in & terminals — subnomic login, servers and ssh to any host with an agent.
- Deploys from anywhere — sites deploy and rollback, with only the URL on stdout and scoped tokens for CI.
Foundation
Shipped- Terminals without open ports — an outbound agent; open a terminal from the browser or the CLI with port 22 closed to the world.
- Session recording & replay — keystroke-by-keystroke capture, replayed with its original timing.
- Granular permissions — roles as sets of permissions, from reading a database to taking over a live session.
- Host metrics — CPU, memory, disk, processes and network from the same agent.
Container & cluster resource management
Shipped- Docker resource management — browse containers, images, volumes and networks; start, stop, restart and update images — policy-checked and recorded, no Docker socket exposed.
- Kubernetes resource management — view and edit workloads, shell into pods and roll deployments — no kubeconfig leaves your cluster.
- Right-sizing — requests and limits recommended from the P95 of sampled usage.
Beyond SSH: databases & internal apps
Shipped- Database consoles — Postgres, MySQL, Redis and Mongo through the agent, every query recorded, no database password handed out.
- Internal app access — open internal dashboards and web apps over the same outbound connection — no VPN, no inbound ports.
- Kubernetes API proxy — full kubectl through a generated kubeconfig, governed and recorded — not just pod exec.
Access control, approvals & guardrails
Shipped- Just-in-time access — access requests with reviewer sign-off and automatic expiry.
- Break-glass access — a logged emergency path with a required justification and an instant notice to owners.
- Live session monitoring & takeover — watch an active terminal in real time, then send input or end it.
- Command & query guardrails — allow, deny and require-approval rules for queries, commands and Kubernetes changes.
Passwordless identity & 2FA
Shipped- Passkeys / WebAuthn — phishing-resistant sign-in with nothing to paste.
- Two-factor authentication — TOTP with recovery codes for accounts that still use a password.
- Scoped API keys — workspace keys for automation and CI, limited to the scopes they carry.
Search & command palette
Shipped- ⌘K command palette — jump to any server, resource, database or app from one keystroke.
- Full-text search — permission-scoped results across your whole workspace.
Scheduled tasks
Shipped- Scheduled commands & actions — run a command or a resource action on a host once or on a schedule, correct across daylight-saving changes.
- Recorded & governed — every run is permission-checked, guardrail-checked and written to the activity log.
Operations
Shipped- Alerting & on-call — rules on CPU, memory, disk and unhealthy workloads, with escalation to whoever is on call.
- Incidents — timelines, MTTA and MTTR, change correlation, and fixes that wait for a person.
- Risk radar & briefings — latent risks ordered by severity, and a daily digest of what changed.
- Cloud accounts & patching — DigitalOcean and Proxmox machines provisioned with the agent on, and pending updates via apt, dnf and yum.
Detection & compliance
Shipped- Anomaly detection — flags for off-hours sessions, first access to a host and mass file operations.
- Compliance evidence packs — access reviews and ZIP evidence packs framed for SOC 2, ISO 27001, HIPAA and PCI DSS.
- Tamper-evident audit — a per-workspace hash chain over the activity log, streamed to a signed webhook or Slack.
Mobile app
In progress- Approvals from your phone — access requests, remediations, patches and access reviews, behind a biometric prompt.
Platform & reach
Planned- Windows hosts — the agent already builds for Windows; validating it on real fleets, with per-operator users, comes next.
- Raw TCP from your laptop — a local proxy client for non-HTTP services behind the agent.
- Pausing a live session — hold a user’s input without ending their session.
Services, next
Planned- Automatic database backups — scheduled snapshots for managed Postgres and Redis.
- Archived service logs — logs that outlive the machine a service ran on.
Identity & SSO
Planned- SSO & SAML — sign in through your identity provider — no separate Subnomic passwords.
- SCIM provisioning — provision and de-provision users and roles as your directory changes.
Have a feature request? Get in touch — roadmap priorities are shaped by what teams ask for.