Security
Secure by design.
Security is not a feature we bolt on later. It is built into how ReleaseMachine is architected from day one.
Encrypted secrets
Environment variables and secrets are encrypted at rest with managed keys and injected at deploy time. They are never baked into your container images.
Per-tenant isolation
Each account gets its own scoped registry and credentials. One tenant cannot reach another tenant’s images or data.
Auditable infrastructure
We run on standard, transparent Docker Swarm rather than a proprietary black box. The system is small enough to reason about end to end.
Isolated builds
Images are built in isolated, rootless build workers, with validation on the source so a malicious build cannot reach internal systems.
TLS everywhere
Every app is served over HTTPS with automatically provisioned and renewed certificates. No manual cert wrangling.
You own your data
Bring your own managed database. Your application data lives in a store you control, not locked inside our platform.
Responsible disclosure
Found a potential vulnerability? We want to hear from you. Email security@releasemachine.com and we will work with you to investigate and resolve it. Please give us a reasonable window to fix issues before any public disclosure.
Ship with confidence.
ReleaseMachine is in private development. Join the waitlist and we’ll tell you the moment it’s live.