The orkestr blog
Engineering, product, and platform insights from the team building the EU-hosted deployment platform.
What are managed sandboxes for AI agents?
Your AI agent shouldn't run untrusted commands on your laptop. Here's what a managed sandbox actually is, in plain terms, with real code examples.
A self-hosted Google reCAPTCHA alternative (we ship it)
Why we chose self-hosted Altcha as our Google reCAPTCHA alternative: proof-of-work, no third-party JS, no behavioral tracking, no GDPR sub-processor headache.
EU managed sandboxes for AI agents, in private beta
An EU-native managed sandbox for AI agents. Drop-in for Claude Code, Cursor, MCP clients, and Claude Managed Agents. Private beta open.
Team workspaces on orkestr, and the ownership-transfer problem
Team plan has improved on orkestr: explicit team workspaces, shared project budgets across personal and team contexts, and a real ownership-transfer flow.
Zero downtime deployment is now the default on orkestr
Every deploy runs alongside the old one. Traffic only cuts over once health and app checks pass. Bad deploy? The previous version keeps serving. No downtime.
Functions on orkestr, now with pip and npm
Dependencies, more runtimes, live build progress, friendlier failures: what changed in orkestr Functions since the beta. EU-hosted serverless, no DevOps tax.
Vercel's April 2026 breach: your Monday checklist
The April 2026 Vercel breach started at a third-party AI tool and exposed environment variables. If you deploy on Vercel, here's what to rotate today.
Functions on orkestr, in beta
Write HTTP handlers in Node or Python, get a public URL in under a minute. No Dockerfile, no repo. EU-hosted. orkestr Functions is in beta.
Hi
Starting a blog. A short note on why orkestr exists and what you'll find here.