Where sh0 is going
From self-hosted single-binary to managed cloud platform with AI-powered operations.
Development phases completed
Engineering sessions logged
Security issues fixed
Tests passing
sh0 is feature-complete as of April 2026. The roadmap below focuses on stability, security patches, and polish. Future features are optional enhancements.
Self-Hosted Stable
Everything needed to deploy and manage applications on a single server. 29 phases, 2 security audits, a full dashboard redesign, and 90+ engineering sessions.
- 10 Rust crates, single binary, ~30MB idle RAM
- 180+ API endpoints, 19 CLI commands, 22 dashboard pages
- 5 deploy pipelines (Git, Docker Image, Dockerfile, ZIP, Template/Compose)
- 183 Deploy Hub options, 170 one-click templates across 15 categories
- 19 stack detectors, 15 Dockerfile templates, 34+ Code Health Check rules
- Auto-SSL (Let's Encrypt), custom SSL certificates with CSR generation
- Monitoring, 5 alert channels, uptime checks, public status pages
- Backups with 13 storage providers (S3, R2, SFTP, Dropbox, Google Drive)
- Autoscaling (1-50 replicas), 3 load balancing strategies
- Team RBAC (4 tiers), TOTP 2FA, Google OAuth, audit logging
- Web terminal (xterm.js), file browser, inline editor
- Cron jobs (50/app), deploy hooks (4 stages), preview environments (per PR)
- sh0.yaml Infrastructure as Code, export to 7 formats (K8s, AWS, GCP, Vercel...)
- Stack-based dashboard, Cmd+K palette, 5 languages, dark/light theme
- 51 security issues fixed, AES-256-GCM encryption, CSRF/SSRF prevention
Multi-Server BYOS
Deploy across multiple servers from a single sh0 instance. Bring Your Own Server with SSH tunnel management. Business plan feature.
- Remote node registration via pure Rust SSH (russh)
- SSH TOFU (Trust on First Use) with host key fingerprint verification
- Docker image transfer via save/load over SSH tunnels
- Node-aware deploy pipeline dispatching builds to remote servers
- Dashboard: node management with status indicators and health monitoring
- Node hardening: error handling, connection validation, graceful cleanup
Release Pipeline
One-command installation and automated release builds. The public launch pipeline.
- Install script: curl -fsSL https://get.sh0.dev | bash
- GitHub Actions CI/CD with cross-compilation
- Docker image: ghcr.io/zerosuite/sh0
- Linux x86_64 + aarch64 musl static binaries
- GitHub Releases with changelogs and checksums
- Auto-update check mechanism
AI Assistant & MCP Server
Full AI integration with MCP protocol server, 103 tools, AI sandbox, and multi-model chat. Connect from Claude Desktop, Cursor, or the built-in dashboard.
- MCP server: Streamable HTTP, 103 tools, JSON-RPC 2.0, session management
- OpenAPI-driven tool generation with x-mcp-* extensions (single source of truth)
- 3-tier safety: scoped API keys, risk classification, confirmation tokens
- AI gateway: 3-way routing (MCP connector, legacy, docs expert)
- AI Sandbox: Alpine sidecar per app with shell, packages, volume access
- Dashboard AI chat with model selector and conversation history
- Prepaid wallet billing (Haiku, Sonnet, Opus) with BYOK on Business plan
- 10 audit rounds across 5 phases -- 0 critical issues in production
AI Web Search & Specialist Agents
Web search, URL browsing, and specialist AI agents (DevOps, DBA, Security, SRE, Network). The AI can research real documentation and answer with domain expertise.
- Native web search powered by Claude with source citations
- 6 specialist agents with domain-specific system prompts
- Agent picker modal with category filtering
- Per-conversation agent persistence and switching
Free Tier, Docker & Bug Fixes
Free tier expansion, Docker distribution, self-update system, and 12 bug fixes across CLI, auth, scaling, and license gating.
- Backups available on Free plan (local storage)
- Docker image on Docker Hub and GHCR
- Self-update command (sh0 update)
- Systemd service auto-setup + uninstall command
- Inline upgrade banners (replaces full-page blockers)
- CLI consistency: unified positional args, cron list alias, export syntax
- 12 bug fixes: ssh lookup, WebSocket auth, scale-down, start idempotency
File Storage, Database Servers & Mail
Three major managed services: S3-compatible file storage (MinIO), standalone database servers with 5 engines, and managed email hosting (Stalwart) with full DNS auto-configuration.
- Managed S3-compatible object storage: buckets, access keys, usage monitoring
- Standalone database servers: PostgreSQL, MySQL, MariaDB, MongoDB, Redis
- Managed email hosting with DKIM/SPF/DMARC auto-configuration
- 4-step DNS wizard with Cloudflare auto-configure
- Database admin UI (dbGate, phpMyAdmin, Mongo Express) and external access with IP allowlist
- Mailboxes, aliases, catch-all, and deliverability monitoring
- Global domains page and 50+ new API endpoints
Security, Polish & Feature-Complete
Mail enhanced features, license gating for all BaaS services, Trustpilot integration, 15 security fixes (5 critical + 10 important), 8 SEO alternative pages, homepage redesign, pricing comparison matrix, and investor relations page. sh0 is feature-complete.
- Mail enhanced features: spam filters, vacation auto-reply, Sieve rules, DKIM rotation, mail queue monitoring
- License gating: all BaaS services gated to Pro+ with UpgradePrompt popups (12 pages)
- 15 security fixes: Sieve injection, MCP scope bypass on 92 tools, path traversal, vacation data loss, and more
- Trustpilot review integration, BaaS quick stats, homepage redesign, pricing matrix (27 rows)
- 8 SEO alternative pages, investor relations page, AI system prompt updates, 979 i18n keys
Stability & Polish
sh0 is feature-complete. This phase focuses on stability, security patches, performance, and polish. No new features -- only refinements.
- Bug fixes, performance optimizations, and stability improvements
- Security patches and dependency updates
- Dashboard UX polish and accessibility improvements
- Documentation updates and onboarding flow refinements
Full Internationalization
Complete translation of the dashboard and documentation into multiple languages. Making sh0 accessible to developers worldwide.
- Full dashboard translation (UI labels, messages, notifications)
- Supported languages: French, Spanish, Portuguese, Arabic, Swahili, Chinese, Japanese
- Language auto-detection with manual override in settings
- Translated documentation and CLI help output
OpenTelemetry Export
Export metrics and traces to your existing observability stack.
- OTLP metrics and trace export
- Deploy pipeline tracing with span context
- Integration guides for Grafana, Datadog, New Relic
Outbound Webhooks
Event system for real-time integrations with external services.
- Events: deploy, scale, alert, backup, team changes
- HMAC-signed webhook payloads with automatic retry logic
- Delivery logs with response tracking and failure diagnostics
Nixpacks & Buildpacks
Alternative build strategies for broader language and framework coverage.
- Nixpacks integration (Rust-native, same as Railway)
- Cloud Native Buildpacks support
- Fallback chain: Dockerfile -> Nixpacks -> sh0 templates
Multi-Environment
Separate dev, staging, and production environments per project with promotion workflows.
- Environment-specific env vars, domains, and scaling config
- Promotion flow: staging -> production with one click
- Environment badges and isolation in dashboard
CI/CD & Terraform
Deep integration with existing CI/CD pipelines and infrastructure-as-code workflows.
- GitHub Actions: sh0-deploy, sh0-check, sh0-preview actions
- Terraform provider for sh0 resources (apps, domains, env vars)
- GitLab CI/CD template
App Sleeping
Idle detection with automatic container sleep and wake-on-request. Save server resources for inactive apps.
- Configurable idle timeout (no requests for N minutes)
- Auto-sleep: stop container, preserve state
- Wake on request: reverse proxy triggers container start
- Sleep/wake status in dashboard with manual controls
Enterprise
SSO, compliance, and air-gapped deployment for large organizations.
- SAML SSO authentication
- IP allowlisting and network policies
- Advanced audit log with compliance export
- Air-gapped deployment support (offline install)
White Label
Rebrand sh0 as your own platform. Custom logos, colors, domain, and branding throughout the dashboard and CLI.
- Custom logo, favicon, and brand colors across dashboard
- White-label CLI with custom binary name and branding
- Custom domain for dashboard and API endpoints
sh0 Cloud
Managed hosting platform. Deploy without managing servers. Contabo + Hetzner infrastructure with Africa-first pricing.
- Multi-tenant orchestration with automated server provisioning
- AI Chat-to-Deploy: "Deploy my repo with Postgres" -- sh0 does the rest
- AI Resource Advisor: right-size your containers automatically
- Managed databases with point-in-time recovery
- ZeroFee Mobile Money payments (135+ providers, 18+ African countries)
- Plans from $10/mo with RAM-based resource budgets
Multi-Region
Deploy to multiple geographic locations with intelligent routing.
- Region-aware deployment targeting (EU, US, Africa, Asia)
- Cross-region failover with health-based routing
- Latency-based DNS routing for global applications
Marketplace
Community-driven template and plugin ecosystem.
- Template marketplace with community submissions and reviews
- Premium verified templates with support guarantees
- Revenue sharing for template authors
How we version
Philosophy: Self-hosted versions always remain fully functional. Cloud features are additive, never required. You can run sh0 forever on your own server with zero external dependencies.
Already built and working
Everything below is shipped in v1.0.0 through v1.6.0
Start with what's already built
Everything you need to deploy applications is already shipped. No waiting for future versions.