PilaePilae
Talk to us

Operate

Deploy

Services

Start with one workload

Fixed-price onboarding, then a monthly plan per managed app. Your estate grows one app at a time.

09:41 discover  keycloak 26.1.4
09:41 backup    verified, ch-zh1
02:00 apply     rolling, ok
02:01 restore   drill ok, 1m02s
Talk to us

By project

By industry

By role

Private AI, on your own servers

Chat, search and drafting with open models on infrastructure you control, operated by Pilae.

See private AI

AI and LLM

Workflow and data

Collaboration and identity

Business

Engineering and security

Browse

Security and operations

Compliance and legal

Request the security pack

DPA, sub-processor list and architecture overview, sent to your security or procurement team.

Request the pack

Learn

Compare

Company

Lausanne, Switzerland

Rue de Bourg 27, 1003 Lausanne. Swiss law, Swiss data protection, engineers on the support line.

Follow on LinkedIn
A painting of a vast golden-hour sky over a very low horizon, three small dark machines standing in silhouette along the land at the bottom

On-prem open-source apps, agents, workflows. Managed autonomously.

Pilae gives your team the next-gen stack to manage and customise your critical open-source apps inside your own infrastructure, or on one of our 10+ sovereign sites around the globe. So you stay fully sovereign. Monitoring, security patches, backups, logs and scale fully managed.

Talk to usSee it at work

Pilae

  1. Machine

    A machine, yours or ours, joined to your private network.

  2. Control Plane

    One console holds every machine, every project, every pod.

  3. Edge Network

    A private mesh. Your apps answer on private addresses only.

  4. Proxy

    One gate to the web. Port 443, nothing else.

  5. Agent

    Pilae Agent plans, you approve, it applies and writes the record.

A monolithic dark block the size of a house standing alone in a golden field, one small figure before it for scale

Everything starts with a machine.

A server in your datacenter, a VM in your cloud, or one of our sovereign sites. Pilae installs the runtime and operates the machine from there.

An operator at one long console before a wall-sized window, rows of dark machine blocks across the plain outside

Then the Pilae Control Plane.

One console for every machine, wherever it runs. It deploys from a catalogue of open-source apps and writes every action to the audit log.

A dozen dark machine blocks across a valley at blue hour, joined by thin lines of golden light

Connected over the Pilae Edge Network.

Every machine joins a private mesh. Your apps answer on private addresses only. Nothing on them can be reached from the internet.

A stream of small lights passing through the one open gate in a high stone wall, dark machine blocks calm beyond it

Exposed to the web only through the Pilae Proxy.

An app that has to face the internet goes through a reverse proxy Pilae runs, never through a port on your machine. One port open, 443.

Let Pilae Agent do the work.

The agent plans an operation, shows you the plan and waits. You approve; it applies in your window, verifies, and writes the record.

Talk to usBook a 30-minute briefing

$ pilae agent watch keycloak-prod

  1. 09:41:02discoverkeycloak 26.1.4 fixes CVE-2026-2231
  2. 09:41:05backupkeycloak-prod snapshot verified, ch-zh1
  3. 09:41:20stagingkeycloak-staging up, checks 14/14
  4. 09:42:00windowwindow 02:00 CET, approved by j.muller
  5. 02:00:07apply26.1.3 to 26.1.4, rolling, no downtime
  6. 02:00:41checkslogin, oidc, smtp, backups: ok
  7. 02:01:10restoredrill from snapshot: ok, 1m02s