Infrastructure Visibility Platform

Know your infrastructure
inside and out.

Install our lightweight OpenSource agent. HostAtlas automatically discovers every server, service, domain, container, and certificate in your infrastructure. Monitor metrics, detect incidents, and get alerted before issues become outages.

bash — prod-01

0s

Agent install time

<0 min

To full infrastructure map

0s

Heartbeat interval

0%

Outbound-only. No open ports.

The problem

You shouldn't need five tools to understand your own infrastructure.

Most teams cobble together separate solutions for monitoring, alerting, log management, and incident response. Information lives in silos. When something breaks at 3 AM, you're SSH-ing into servers, grepping through logs, and trying to remember which domain runs on which server.

HostAtlas replaces that chaos with a single source of truth. One agent per server. One platform for everything. Every server, every service, every domain, every container — mapped, monitored, and observable from one dashboard.

How it works

From zero to full visibility in under five minutes.

Three steps. No complex configuration. No YAML files to write.

1

Install the agent

$ curl -sSL install.hostatlas.app | bash

A single command installs a lightweight Go agent on your server. Under 10 MB, no dependencies, runs as a system service. The agent communicates outbound only — no inbound ports required.

2

Auto-discovery begins

nginx detected — 3 domains found
mysql 8.0 — port 3306
redis 7.2 — port 6379
2 SSL certs — expires in 47d

Within seconds, the agent discovers running services (nginx, MySQL, Redis, PostgreSQL, Caddy), parses web server configs to find domains, detects Docker containers, and reads SSL certificates.

3

Monitor & alert

CPU
34%
RAM
72%
Disk
41%

System metrics stream in every 30 seconds. Set threshold alerts, configure notification channels, and define escalation policies. When something breaks, HostAtlas detects it, collects logs, and creates an incident automatically.

Atlas Graph

See how everything connects.

The Atlas Graph is an interactive topology map of your entire infrastructure. Servers, services, domains, and containers — all visualized as an interconnected graph with real-time status indicators.

  • check_circle Color-coded nodes: blue for servers, green for services, purple for domains, orange for containers
  • check_circle Red ring indicators for offline or stopped nodes
  • check_circle Click any node to navigate directly to its detail page
  • check_circle Zoom, pan, and search across the entire graph
Learn more about Atlas Graph →
LIVE
S1
prod-01
S2
prod-02
ngx
nginx
sql
mysql
rds
redis
pg
postgres
D1
example.com
D2
api.example.com
D3
shop.example.com
C1
app-worker
C2
queue (stopped)
Server
Service
Domain
Container
# Discovery output — prod-01
$ hostatlas-agent discovery --verbose
[OK] System: Ubuntu 22.04 LTS / amd64
[OK] nginx 1.24.0 detected on port 80, 443
[OK]  ├─ example.com (TLS valid, 47d remaining)
[OK]  ├─ api.example.com (TLS valid, 47d remaining)
[OK]  └─ shop.example.com (TLS valid, 12d remaining)
[OK] mysql 8.0.35 detected on port 3306
[OK] redis 7.2.4 detected on port 6379
[OK] Docker: 3 containers (2 running, 1 stopped)
[OK]  ├─ app-worker (running)
[OK]  ├─ scheduler (running)
[WARN]  └─ queue-worker (stopped)
[OK] SSL certificates: 2 found
[OK] Log paths: 6 discovered
[INFO] Discovery complete: 3 services, 3 domains, 3 containers, 2 certs

Auto-Discovery

No manual inventory.
No stale spreadsheets.

The HostAtlas agent runs a comprehensive discovery scan every 5 minutes. It detects running processes, parses web server configurations, reads Docker socket data, and validates SSL certificates — all without manual configuration.

dns

Service Detection

Nginx, Apache, MySQL, PostgreSQL, Redis, Caddy — detected with version numbers and ports.

language

Domain Extraction

Parses nginx configs, Apache virtual hosts, and Caddy domain blocks to find every hosted domain.

deployed_code

Container Discovery

Docker and containerd containers with image, status, and resource mapping.

verified

Certificate Tracking

Let's Encrypt and custom certificates with expiry dates and renewal detection.

Monitoring

Every metric. Every 30 seconds.

The agent collects system metrics at 30-second intervals and pushes them to the HostAtlas platform. CPU usage per core, memory breakdown (used, cached, buffers, swap), disk usage per mount point, network I/O, and system load averages.

CPU

Per-core

+ aggregated view

Memory

Full stack

used / cached / buffers / swap

Disk

Per mount

with threshold alerts

Network

In / Out

bytes transferred

Explore monitoring capabilities →
prod-01 — System Metrics
Online
CPU Usage 34.2%
Memory 5.8 GB / 8 GB
Used Cached Buffers
Disk / 41.2%
Disk /var 82.7%
Load 1m

0.82

Load 5m

1.24

Load 15m

1.08

Uptime

47d 12h

Incident Management

When a service crashes, HostAtlas is already investigating.

Automatic crash detection with full log collection, system snapshots, and timeline reconstruction. No manual log grepping required.

crisis_alert

Step 1

Detect

Agent detects service process disappearance within 30 seconds.

description

Step 2

Collect logs

Gathers error logs, syslog, dmesg from 5 min before to 2 min after crash.

analytics

Step 3

Snapshot metrics

Captures CPU, RAM, disk metrics at crash time. Highlights values above 90%.

campaign

Step 4

Create & alert

Creates incident with all data correlated. Sends alerts to your notification channels.

update

Step 5

Follow-up

Collects follow-up logs 2 minutes later to capture restart attempts.

Heartbeat Monitoring

Your cron jobs.
Monitored.

Add a single HTTP call to your scheduled tasks. If HostAtlas doesn't hear from your job within the expected interval plus grace period, you get alerted immediately. Track job durations, detect missed runs, and monitor CI/CD pipelines.

# Basic ping
curl -sSL https://app.hostatlas.app/api/hb/abc123
# With duration tracking
curl -sSL .../hb/abc123/start
./backup.sh
curl -sSL .../hb/abc123/success
# Report failure
curl -sSL .../hb/abc123/fail
Set up heartbeat monitoring →
Heartbeat Checks 4 active

Database Backup

Every 6 hours · 5 min grace

Healthy

Last: 2h 14m ago

Cache Warmup

Every 15 min · 2 min grace

Healthy

Last: 3m ago · Avg: 12s

ETL Pipeline

Every 1 hour · 10 min grace

Missed

Expected: 1h 23m ago

CI/CD Deploy

On demand · 30 min grace

Healthy

Last: 4h ago · Duration: 3m 42s

Servers Online

12 / 12

Domains

47

Open Incidents

2

SSL Expiring

3

within 14 days

Top Servers by CPU

prod-03
91%
prod-01
72%
staging
34%

Dashboards

Your infrastructure at a glance.

Build custom dashboards with KPI cards, metric charts, and list widgets. Track server health, domain response times, SSL expiration, and more. Set a default dashboard that greets you on login.

  • check_circle KPI cards, line charts, bar charts, area charts
  • check_circle Time range selection: 1h, 6h, 24h, 7d, or custom
  • check_circle Multiple dashboards per user with saved layouts
  • check_circle Automatic data aggregation for longer time ranges
Explore dashboards →

Integrations

Alerts where your team already works.

Multi-channel notifications with escalation policies, quiet hours, and per-server overrides. Never miss a critical alert.

Slack

Webhook-based integration. Alerts land in your Slack channel with severity indicators and direct links to incidents.

mail

Email

Rich HTML email notifications via Mailgun. Full incident details, metric snapshots, and one-click links to your dashboard.

PagerDuty

Native PagerDuty integration for on-call escalation. Route alerts based on severity to the right team members.

webhook

Webhooks

HMAC-signed outgoing webhooks for custom integrations. Configurable event subscriptions with retry policies and delivery logging.

Open Source

The agent is open source.
By design, not by accident.

The HostAtlas agent runs on your servers and collects sensitive infrastructure data. You deserve to know exactly what it does. That's why it's fully open source — every line of code is auditable, and every network call is transparent.

No hidden telemetry. No secret data exfiltration. No obfuscated binaries. Just a clean, well-documented Go codebase that does exactly what it says — collects metrics, discovers infrastructure, and reports back to your HostAtlas dashboard. Nothing more.

visibility

Full Transparency

Read every line of code. See exactly what data is collected, how it's transmitted, and what endpoints it communicates with. No surprises.

verified_user

Security You Can Verify

Run your own security audits. Review the agent's network behavior. Verify that it only communicates outbound to the HostAtlas API — nothing else.

handshake

Trust Through Openness

We believe trust is earned through transparency, not marketing claims. Open source means you don't have to take our word for it.

group

Community Contributions

Report issues, suggest improvements, or contribute code. The agent gets better because the community can participate directly.

View on GitHub →
hostatlas/agent
Public
Lightweight infrastructure agent written in Go. Collects metrics, discovers services, and reports to the HostAtlas platform.
Go MIT License
What you can audit
Metric collection — exactly which system data is read
Network calls — every outbound HTTP request to the API
Discovery logic — how services, domains, and certs are found
Command execution — whitelisted commands, no arbitrary shell
Log access — which files are read and how they're transmitted
Build process — compile from source yourself if you prefer
Quick start
$ git clone github.com/hostatlas/agent
$ cd agent && go build -o hostatlas-agent
$ ./hostatlas-agent --config /etc/hostatlas/agent.yml

Security & Compliance

Enterprise-grade security. Built in, not bolted on.

Every aspect of HostAtlas is designed with security in mind. Role-based access control, immutable audit logs, encrypted communications, and agent security that requires no inbound ports.

Security overview →
admin_panel_settings

RBAC

Four roles — Owner, Admin, Member, Viewer — with granular permissions and workspace-level isolation.

history

Audit Logging

Immutable, timestamped logs of every user action. Before/after diffs, IP addresses, and user agents.

lock

Encryption

TLS everywhere. API keys stored as SHA-256 hashes. Sensitive config encrypted at rest. bcrypt for passwords.

security

Agent Security

Outbound-only communication. No open ports. Token-based auth. Command whitelisting. Log path restrictions.

passkey

2FA / TOTP

Two-factor authentication with TOTP and recovery codes. Optional SSO/SAML for enterprise plans.

shield

Multi-Tenancy

Complete tenant isolation with global scopes. Your data is never accessible to other organizations.

For Developers

API-first. Extensible by design.

Everything you can do in the UI, you can do via the API. Scoped API keys with expiration dates, HMAC-signed webhooks, and a comprehensive REST API for servers, domains, heartbeats, incidents, and more.

key

Scoped API Keys

Create keys with granular permissions, optional expiration dates, and last-used tracking. SHA-256 hashed storage.

webhook

Outgoing Webhooks

Subscribe to specific events. HMAC-signed payloads with 3 retries and exponential backoff. Full delivery logging.

bolt

Real-time WebSockets

Live updates via Laravel Reverb. Server status changes, new incidents, heartbeat pings — pushed to your UI in real time.

API documentation →
# List all servers
curl -H "Authorization: Bearer ha_sk_..." \
https://app.hostatlas.app/api/v1/servers
# Response
{
"data": [
{
"uuid": "a1b2c3...",
"hostname": "prod-01",
"status": "online",
"os": "Ubuntu 22.04",
"services_count": 3,
"domains_count": 5
}
]
}

Team & Organization

Built for teams. Organized by tags.

Invite team members with role-based permissions. Organize your infrastructure with flexible key-value tags that work across all resource types.

group

Team Management

Invite users by email with role selection. Owner, Admin, Member, and Viewer roles with granular permissions.

JD
John — Owner
SK
Sarah — Admin
ML
Mike — Member
label

Flexible Tagging

Key-value tags across servers, domains, services, and heartbeats. Filter and search your infrastructure by any dimension.

env:production team:backend region:eu-west client:acme tier:critical
workspaces

Workspaces

Logical separation for infrastructure groups. Workspace-level access control keeps teams focused on what matters to them.

Production — 8 servers
Staging — 3 servers
Development — 1 server

Pricing

Start free. Scale as you grow.

Free plan includes 1 server, 3 heartbeats, and 5 days retention. No credit card required.

Free

$0/mo

  • 1 server
  • 3 heartbeats
  • 1 team member
  • 5 day retention

Starter

$19/mo

  • 10 servers
  • 25 heartbeats
  • 5 team members
  • 30 day retention

Pro Popular

$49/mo

  • 100 servers
  • 100 heartbeats
  • 25 team members
  • 90 day retention

Enterprise

$149/mo

  • Unlimited servers
  • Unlimited heartbeats
  • Unlimited team
  • 365 day retention

Ready to see your infrastructure clearly?

Start with one server. See everything it runs. Add more as you grow. No credit card required.

$ curl -sSL install.hostatlas.app | bash_