The Origin of Modern Software Delivery

Build, Ship, and Govern Software — From One Platform.

Provision clusters, deploy applications, manage secrets, control identity, and enforce governance — without stitching together a dozen tools.

Spin up production-ready Kubernetes clusters

EKS with ingress, SSL, DNS, monitoring, and autoscaling — in minutes. Bring your own AWS account.

Create Cluster
3
4
prod-eu-west
EU West (London)
Node Groups
systemt3.medium
23 nodes
applicationm5.xlarge
310 nodes
Pre-configured Addons
Ingress NGINX Cert Manager External DNS Metrics Server Kube State Metrics Cluster Autoscaler
Estimated monthly cost$342/mo
Origin9+
Canacana.build

Your complete software delivery lifecycle,
in the hands of AI agents.

Cana is the AI-native desktop app for engineering teams. Use the Origin9 plugin to provision clusters, configure and run CI/CD pipelines, deploy with GitOps, manage secrets, and govern infrastructure — all from specialized agents.

Plan/
Build/
Preview/
Deploy/
Govern

Trusted by innovative teams

BT
Harman
Verizon
Blocktwin
RefactoreQ
OQ
NextGen Tech
BT
Harman
Verizon
Blocktwin
RefactoreQ
OQ
NextGen Tech

Everything you need

One platform. Every layer.

From cluster provisioning to customer authentication — natively connected, not bolted together.

Clusters
Production-ready EKS with ingress, SSL, DNS, and monitoring
Environments
Dev → Staging → Production with auto-applied security policies
Services
PostgreSQL, Redis, Kafka, Elasticsearch — 20+ one-click services
Deploy
GitOps sync, multi-stage pipelines, drift detection, rollback
Secrets
AES-256 encrypted vault with rotation, versioning, and audit
Identity
SSO + MFA for your team. Identity Studio for your customers
Domains
Custom domains, SSL certificates, DNS management
Members
Role-based access control with fine-grained permissions
Audit
6 audit systems — every action logged with who, what, when
Multi-Cloud
Bring your own AWS account. You own the infrastructure

Infrastructure

Clusters in minutes, not days

Point-and-click Kubernetes provisioning. Bring your own AWS account — Origin9 handles networking, SSL, DNS, monitoring, and autoscaling.

  • Production-ready EKS with pre-configured cluster addons
  • Your cloud, your billing — least-privilege IAM
  • Multi-region: US, EU, Asia Pacific
  • Cost estimation before you provision
Create Cluster
3
4
prod-eu-west
EU West (London)
Node Groups
systemt3.medium
23 nodes
applicationm5.xlarge
310 nodes
Pre-configured Addons
Ingress NGINX Cert Manager External DNS Metrics Server Kube State Metrics Cluster Autoscaler
Estimated monthly cost$342/mo

Environments

Dev to production, governed by policy

Six environment classifications — Development, Testing, Staging, Production, DR, and Sandbox. Each with auto-applied network, pod security, and secrets policies.

DEVTESTSTGPRODDRSANDBOX
Environments
Total4
Ready3
Prod1
EnvironmentClassClusterStatusResources
api-production
api-production
PROD
prod-us-east
Ready
34 secrets·Strict
api-staging
api-staging
STG
staging-us
Ready
18 secrets·Restricted
api-dev
api-dev
DEV
staging-us
Updating
7 secrets·Open
api-dr
api-dr
DR
prod-eu-west
Ready
34 secrets·Sealed

GitOps Deployment

Deploy with confidence, rollback in seconds

Git push to production. ArgoCD-powered GitOps with multi-stage pipelines, approval gates, maintenance windows, and automatic drift correction.

  • Git-native: push to deploy, PR to promote
  • Multi-stage: dev → staging → production
  • Drift detection with auto self-healing
  • Approval gates and maintenance windows
Deploy Specapi-gateway
Auto-sync enabled
main
latest:a3f8c2dfix: rate limit middleware
devSynced
Commita3f8c2d
Imagev2.4.1
Synced3m ago
stagingSyncing
Commita3f8c2d
Imagev2.4.1
Syncednow
productionWaiting
Commitb1e9a4f
Imagev2.3.8
Synced2h ago
Drift detection
No drift detected · Last check 30s ago

Integrations

20+ services, one click each

Databases, caches, message queues, search engines, storage, and payment processing — deploy managed services directly into your clusters.

Managed Services
4 running
+ Deploy Service
PostgreSQL
Database15.4
us-east-1
Redis
Cache7.2
us-east-1
Kafka
Messaging3.6
us-east-1
Elasticsearch
Search8.11
eu-west-2
MongoDB
Database7.0
us-west-2
S3 Bucket
Storage
us-east-1
20+ services available in catalog
MySQLDynamoDBRabbitMQStripeSendGridDatadogNew RelicVaultConsulMinIOClickHouseGrafanaPrometheusArgoCD

Secrets Engine

Security built in, not bolted on

AES-256-GCM encrypted vault with folder hierarchy, version history, auto-rotation, and environment-scoped access policies.

5 secret typesOpaque, TLS, Docker, Basic, SSH
Auto-rotationScheduled key rotation
6 audit systemsComplete action trail
Compliance readySOC 2, ISO 27001, HIPAA
Secrets EngineAES-256-GCM
+ New Secret
Search secrets...
5 secrets
SecretTypePolicyVerKeysExpires
/production/api-keys
OPAQUE
SEALED
v34
/production/tls-cert
TLS
SEALED
v72
12 days
/staging/db-credentials
OPAQUE
RESTRICTED
v23
/dev/stripe-keys
OPAQUE
OPEN
v12
3 days
/production/docker-reg
DOCKER
SEALED
v53

Identity & Auth

Your team's SSO. Your customers' login.

Google, Okta, SAML, OIDC for your team. Identity Studio for your product — custom branding, social login, MFA, roles, permissions, and workflow automation.

  • Team SSO with Google, Microsoft, Okta, any SAML/OIDC
  • Identity Studio: build your product's login experience
  • Custom roles, permissions, and data entities
  • Workflow automation — triggers on user events
Auth ProviderIdentity Studio
Setup Guide
+ New App
128
Users
47
Today
3
Apps
2
Failed
Recent Activity
sarah@acme.cologin
2m ago · 192.168.1.42
mike@acme.comfa verify
8m ago · 10.0.0.15
unknown@test.comlogin
12m ago · 203.0.113.1
alex@partner.iosso login
19m ago · 172.16.0.8
Connections
Google Workspace
42 users
SAML (Okta)
18 users
GitHub OAuth
Disabled
+ Add Connection

Ready to simplify your infrastructure?

From zero to production in minutes. No credit card required.