Bring your team in securely with SSO
SAML or OIDC, tied to the identity provider you already use
Security controls built into the platform
Access, secrets and traceability handled where you deploy, not bolted on after
Trusted by +200 companies to simplify their infrastructure burden
Security that meets your standards
The controls your security team expects, so you can run Qovery inside your own policies instead of around them.
Give everyone the right access with RBAC
Scoped per project and environment, from read-only to full control
Run Qovery in your own perimeter
BYOC or BYOK, in your VPC or ours, Qovery runs wherever you need it
AIR-GAPPED
Track every action with audit logs
Attributed to each person and agent, with a minimum retention period of 365 days
Connect your own secret manager
Keep credentials in the vault you already use, not in Qovery
Compliant from day one
Every cluster Qovery provisions comes with encryption, network isolation, scoped IAM roles and a complete audit trail already in place. The controls auditors ask for are there before you need them, and our own certifications, including SOC 2 Type II, HIPAA, GDPR and DORA, back the platform underneath.
Trust center
From a compliance perspective, Qovery helps us see who has access to what, understand why someone is an admin, and review our infrastructure using agents and workflows pretty easily.
Gauthier Wallet
Founding Engineer at Lucis
Every control, in one place
The security settings your team needs, configured in Qovery instead of spread across tools
Custom RBAC
Define your own roles, with permissions per project and environment.
SSO
SAML or OIDC, mapped to the identity provider you already use.
Audit logs
Every action attributed to a person or an agent, with the retention you need.
Secret manager integration
Connect your existing vault instead of storing credentials in Qovery.
Air-gapped control plane
Run Qovery entirely inside your network, with no outbound connection to our infrastructure.
Run on a private VPC
Deploy into your existing VPC and keep your own network rules.
