# Northflank

The runtime platform for AI-native companies. One governed path from AI-generated code to production, across any cloud, VPC, or on premises.

Source: https://wheredoirunthis.com/products/northflank · JSON: https://wheredoirunthis.com/api/products/northflank · Read on 2026-10-07

## At a glance

- Type: PaaS
- Kind: Hosted
- Isolation: Kata / gVisor
- Free tier: Yes
- Starting price: Not disclosed
- GPU: Yes
- Regions: 17
- Coverage: 30 of 61 assessed capabilities supported
- Agent readiness: read 9 of 11 signals, drive 8.5 of 11 signals

## Links

- Homepage: https://northflank.com/
- Docs: https://northflank.com/docs
- Pricing: https://northflank.com/pricing

## Pricing

- Model: Usage-based, billed per second (prorated) on Northflank Cloud: vCPU + memory + GPU + disk + egress. Predefined compute plans are priced per container. No seat pricing ('Teams included for free'). Tiers: Sandbox (free), Pay-as-you-go, Enterprise (custom, invoice, annual commit). BYOC adds no per-resource Northflank compute charge.
- Unit: per vCPU-hour + per GB-memory-hour + per GPU-hour + per GB-month disk + per GB egress
- Free tier: Yes: 'Sandbox' tier ('for testing and building trust with Northflank'): always-on compute (no sleeping), 2 free services, 1 free database, 2 free cron jobs, 2 projects, limited compute; free projects support one Cloud Harness.

| Tier | Price | Includes | Notes |
| --- | --- | --- | --- |
| Sandbox (free) | $0/mo | 2 services, 2 jobs, 1 addon, 2 projects, limited compute, always-on; 1 Cloud Harness |  [source](https://northflank.com/pricing) |
| Pay-as-you-go | from $0/mo + usage | Unlimited projects/services/jobs/addons/users; usage per second: vCPU $0.01667/hr, memory $0.00833/GB/hr, disk $0.15/GB-mo, egress $0.06/GB; GPUs L4 $0.80/hr -> RTX PRO 6000 $3.00/hr; 6+ cloud regions, 600 BYOC regions; Network ingress free; no included compute allowance on this tier. |  [source](https://northflank.com/pricing) |
| Enterprise | custom | Run in your VPC, 24/7 support + SLA, FDE onboarding, SSO SAML/OIDC, audit logs, global backups + HA/DR, white-label, BYO registry/Vault/DNS, self-deployable control plane, HIPAA BAA, invoice billing, volume discounts, annual commitment |  [source](https://northflank.com/pricing) |

- Overages: vCPU $0.01667/hr; memory $0.00833/GB/hr; disk (SSD/HDD) $0.15/GB-mo; egress $0.06/GB (ingress free; cross-zone $0.02/GB with zonal redundancy). GPUs: L4 $0.80, A100-40 $1.42, A100-80 $1.76, H100 $2.74, RTX PRO 6000 $3.00 per hour. The June read's 'builds & backups $0.08/GB-mo' and 'logs & metrics $0.20/GB (first 10 GB free)' lines are no longer on the page.
- Card required: No
- Source: https://northflank.com/pricing

## Runtime

- **GPU & accelerators**: Yes: NVIDIA L4 24GB $0.80/hr, A100 40GB $1.42, A100 80GB $1.76, H100 80GB $2.74, RTX PRO 6000 96GB $3.00 (rendered prices). H200 141GB and B200 180GB appear in the pricing-calculator catalogue without a rendered price. GPU sandboxes run under gVisor and need a GPU-enabled region; time-slicing and MIG supported. [source](https://northflank.com/pricing) (confidence: high)
- **BYOC (Bring your own cloud)**: Yes: AWS (EKS, incl. AWS EU Sovereign Control Plane), GCP (GKE), Azure (AKS), Oracle (OKE), CoreWeave, Civo, Nebius, or any Kubernetes / bare metal / OpenShift / RKE2. 'No added cost for running in your VPC.' Kata microVM / gVisor sandboxing self-service on BYOC (Aug-Sep 2026); Enterprise adds a self-deployable control plane and BYO registry/Vault/DNS/logs/metrics. [source](https://northflank.com/pricing) (confidence: high)
- **Secrets management**: Runtime-variable and build-argument secret injection (kept out of Kubernetes), secret files with Unix ownership/mode, secret groups restricted by tags/environments, global secrets with version history, external secret managers (Vault, beta), customer-managed envelope encryption with your own cloud KMS key (Aug-Sep 2026), addon credential rotation. [source](https://northflank.com/security) (confidence: high)
- **Storage options**: Persistent volumes incl. RWX at $0.15/GB-month; managed S3-compatible object storage buckets with automatic domain allocation (May-June 2026, the off-ramp from MinIO addons); managed Postgres/MySQL/MongoDB/Redis/RabbitMQ/Memcached addons; backups (snapshot/dump, global backups to your own S3 incl. Object Lock). [source](https://northflank.com/changelog/may-and-june-2026) (confidence: high)
- **Supported workloads**: services (long-running, combined/build/deployment), jobs (one-off + cron), addons / managed databases + queues (Postgres, MySQL, MongoDB, Redis, RabbitMQ, Memcached) and object-storage buckets, Sandboxes (microVM, untrusted / agent code, sub-second boot), Cloud Harness coding-agent workspaces, GPU workloads (inference, training, notebooks), preview environments, workflows / release flows, volumes [source](https://northflank.com/docs) (confidence: high)
- **Persistence**: Persistent volumes ($0.15/GB-month SSD or HDD), incl. ReadWriteMany (RWX) multi-read-write volumes, now direct-mounted inside microVM guests; per-replica volumes for stateful sets; scheduled volume backups; managed addons (Postgres/MySQL/MongoDB/Redis/RabbitMQ) keep data. Sandbox ephemeral storage is lost on pause unless a volume is attached; Cloud Harness persists /home/harness by default. [source](https://northflank.com/pricing) (confidence: high)
- **Data jurisdiction**: UK company (Northflank Ltd, London). Control plane on Google Cloud London or Amsterdam. Managed worker clusters: free tier on Azure, paid tier on GCP, in 17 user-selected regions (Americas, EMEA, Asia Pacific); region fixed per project. BYOC runs in the customer's own account/region. [source](https://northflank.com/security) (confidence: high)
- **Resource limits & quotas**: Compute plans from nf-compute-10 (0.1 shared vCPU / 256 MB, $2.70/mo) to 32 vCPU / 488 GB ($3312/mo); CPU scales 0.1-32 vCPU, memory 256 MB-256 GB; custom plans on request / any size on BYOC. Free 'Sandbox' tier: 2 services, 2 jobs, 1 addon, 2 projects, limited compute, one Cloud Harness. API: 1000 requests/hour default with x-ratelimit-limit/remaining/reset headers. [source](https://northflank.com/pricing) (confidence: high)
- **SDK languages**: JavaScript/TypeScript, Python — "'npm install @northflank/js-client' (0.11.0) and 'pip install northflank' (PyPI 2.0.0, 2026-09-22); sandbox docs show both side by side." [source](https://northflank.com/docs/v1/application/sandboxes/quickstart) (confidence: high)
- **Network & egress controls**: Network policies with ingress AND egress allow/deny rules ('If you add any egress rule, it becomes an allow-list and only specified traffic is permitted'), managed from the dashboard (May-June 2026) and API; Cilium namespace isolation by default; static egress IPs (shared or dedicated) via Cilium egress gateway; Tailscale integration. [source](https://northflank.com/docs/v1/application/network/configure-network-policies) (confidence: high)
- **Snapshots & forks**: Container snapshots (Aug-Sep 2026): capture the FILESYSTEM of a running or terminating service pod and restore a service from it (dashboard/CLI/API; requires the Kata runtime). Plus database fork ('create a new database from the existing state of another'), volume backup/clone incl. cross-namespace clone. No memory/process snapshot. [source](https://northflank.com/changelog/august-and-september-2026) (confidence: high)
- **Deployment methods**: UI dashboard, REST API (OpenAPI 3.0.1), CLI (@northflank/cli 0.13.0), JS + Python SDKs, bi-directional GitOps, Git-connected builds (GitHub, GitLab incl. self-hosted, Bitbucket, Azure DevOps, Gitea, GitHub Enterprise, Cursor Origin), source-bundle builds, Dockerfile/buildpacks, external registry images, IaC templates, GitHub Action [source](https://northflank.com/docs) (confidence: high)
- **Isolation**: Kata / gVisor — "Security page: 'Kata Containers are used as the default runtime class for workloads in the cluster ... This applies KVM and micro-VMs through Cloud Hypervisor to secure the workloads from the host kernel'; gVisor is the alternative 'when nested virtualization is unavailable'. Sandbox docs: 'CPU sandboxes run in microVMs, and GPU sandboxes run under gVisor ... Boot times stay under a second.' On BYOC (Aug-Sep 2026) 'Services, jobs, addons, and builds can each use their own sandboxing mode, with support for Kata microVMs, gVisor or no sandboxing.'" [source](https://northflank.com/security) (confidence: high)

## Capabilities

### AI & agents

| Capability | Status | Evidence |
| --- | --- | --- |
| Agent skills | Supported | "Northflank agent skills extend your AI coding assistant with domain-specific knowledge about Northflank ... /plugin marketplace add northflank/skills." [source](https://northflank.com/docs/v1/application/ai-agents/agent-skills) |
| AI app builder | Not supported | "Git / Dockerfile / buildpacks / image / IaC templates; no prompt-to-app generation surface." [source](https://northflank.com/) |
| Autonomous QA agent | Not supported | "No first-party QA-testing agent." [source](https://northflank.com/) |
| Built-in coding agent | Not supported | "Cloud Harness runs third-party agents (Claude Code, Codex, Cursor, OpenCode, Pi) or an 'Empty sandbox'; Northflank ships no first-party coding agent." [source](https://northflank.com/docs/v1/application/cloud-harness/quickstart) |
| BYOK for LLMs | Partially supported | "If you use a coding agent, authenticate with an API key or linked account ... (Claude, Codex, Pi, or your own agent)." [source](https://northflank.com/docs/v1/application/cloud-harness/quickstart) |
| Credential-injection proxy | Not supported | "Secrets are injected into the workload environment/files; no proxy that swaps placeholder tokens for real credentials outside the workload. (The CI git proxy issues repo-scoped clone tokens, which is not workload egress injection.)" [source](https://northflank.com/security) |
| LLM gateway | Not supported | "No LLM gateway / multi-provider model router." [source](https://northflank.com/) |
| MCP client | Not supported | "No evidence the platform itself acts as an MCP client (agents run inside Cloud Harness bring their own MCP config)." [source](https://northflank.com/) |
| MCP-server hosting | Supported | "Run your most critical services, databases, jobs, inference, and agents ... Long-running agents (MCP, RAG, TTS, image, video, voice)." [source](https://northflank.com/) |
| MCP server | Not supported | "No Northflank MCP server: 0 occurrences of 'MCP' in the docs index; /.well-known/mcp 404; ora mcp-server fail. Agents drive Northflank via the API/CLI/skills." [source](https://northflank.com/docs/v1/llms.txt) |
| Model inference API (first-party) | Not supported | "Host a model on GPUs: you deploy and serve your own model; there is no first-party token-billed model catalogue API." [source](https://northflank.com/docs/v1/application/use-cases/host-a-model-on-gpus) |
| Preinstalled coding agent | Supported | "Coding agents can now work directly inside a managed Northflank workspace. Choose Claude Code, OpenAI Codex, Cursor, OpenCode or Pi, authenticate with your own account or API key, and connect through the browser terminal or SSH." [source](https://northflank.com/changelog/august-and-september-2026) |

### Networking & delivery

| Capability | Status | Evidence |
| --- | --- | --- |
| Automatic HTTPS | Supported | "Northflank uses Let's Encrypt to automatically issue SSL certificates for domains ... maintains wildcard certificates for the code.run domain." [source](https://northflank.com/security) |
| Custom domains | Supported | "Custom domains: Point your own domains at Northflank services." [source](https://northflank.com/pricing) |
| Direct public IPv6 | Not supported | "Public exposure is via managed HTTP/TCP/UDP ports and load balancers; no per-instance public IPv6 address documented." [source](https://northflank.com/docs/v1/application/network/networking-on-northflank) |
| Edge KV store | Not supported | "No edge key-value store (Northflank CDN offers caching presets/purge, not KV)." [source](https://northflank.com/docs) |
| Egress controls | Supported | "Network policies define allow and deny rules for ingress (inbound) and egress (outbound) traffic ... If you add any egress rule, it becomes an allow-list and only specified traffic is permitted." [source](https://northflank.com/docs/v1/application/network/configure-network-policies) |
| Email send / receive | Not supported | "No first-party email send/receive primitive; email appears only as a notification channel ('Send platform events to Slack, Email, Discord, Teams, and Webhooks')." [source](https://northflank.com/pricing) |
| Public preview URLs | Supported | "Northflank maintains wildcard certificates for the code.run domain, which is used for default generated public port DNS entries; preview environments per PR." [source](https://northflank.com/security) |
| Private networking | Supported | "Services and addons can communicate over private networking within the cluster ... Service mesh and mTLS; multi-project networking; Tailscale." [source](https://northflank.com/security) |
| Built-in reverse proxy | Supported | "Load balancing across instances: Scale up to multiple instances and get auto load balancing; path-based routing; private VPC load balancers." [source](https://northflank.com/pricing) |

### Organisation & security

| Capability | Status | Evidence |
| --- | --- | --- |
| Built-in auth | Not supported | "No auth-as-a-service / end-user IAM for deployed workloads (only platform RBAC and basic-auth / IP security policies on ports)." [source](https://northflank.com/) |
| BYOC | Supported | "Cloud providers: AWS (EKS), Azure (AKS), GCP (GKE), CoreWeave, Oracle, Civo; Bring your own Kubernetes ... No added cost for running in your VPC. Nebius added Aug-Sep 2026." [source](https://northflank.com/pricing) |
| Deploy into customers' VPCs | Supported | "With Northflank, you define your application once and deploy it automatically into any customer AWS, GCP, Azure, or on-prem infra ... Manage deployments in hundreds of customer VPCs from a single interface." [source](https://northflank.com/product/customer-vpc-deployments) |
| Secrets management | Supported | "Secret injection is used to avoid storing secrets, environment variables, and sensitive configurations within Kubernetes; secret groups, global secrets, external secret managers (beta), customer-managed KMS envelope encryption." [source](https://northflank.com/security) |
| Self-host / OSS core | Not supported | "Closed hosted platform; github.com/northflank publishes only the agent-skills repo, a GitHub Action and examples, no self-hostable platform core." [source](https://github.com/northflank) |
| Sharing | Partially supported | "Share a template ... Shareable template links can now be limited to your organization." [source](https://northflank.com/docs/v1/application/infrastructure-as-code/share-a-template) |
| SSO / SAML | Partially supported | "Single Sign On is included as part of our enterprise offering ... OIDC/SAML ... SCIM / Directory Sync." [source](https://northflank.com/security) |
| Teams | Supported | "Users: unlimited; Fine-grained RBAC; Organisations; No seat-based pricing, Teams included for free." [source](https://northflank.com/pricing) |
| Workload identity | Supported | "Workload identity allows your services and jobs to securely access resources in your AWS or GCP account without managing credentials manually. Northflank assumes a role in your cloud account using OIDC ... Credentials are refreshed before expiration." [source](https://northflank.com/docs/v1/application/bring-your-own-cloud/configure-workload-identity) |

### Developer access

| Capability | Status | Evidence |
| --- | --- | --- |
| CLI | Supported | "Use the Northflank CLI: create and manage projects on Northflank using the command line client (@northflank/cli)." [source](https://northflank.com/docs/v1/api/use-the-cli) |
| E2B-compatible API | Not supported | "Sandboxes are driven through Northflank's own API / JS + Python SDKs (services + exec), not an E2B-compatible endpoint." [source](https://northflank.com/docs/v1/application/sandboxes/quickstart) |
| Filesystem API | Partially supported | "Copy files and directories between your machine and a running sandbox. Both SDKs stream the transfer over the same exec connection used to run commands, so the sandbox image needs tar on its PATH." [source](https://northflank.com/docs/v1/application/sandboxes/configure-and-manage-sandboxes) |
| Git deploy | Supported | "Commit, push, build from Git workflow; GitHub, GitLab & Bitbucket; self-hosted GitLab; Azure DevOps; Gitea and GitHub Enterprise (May-June 2026)." [source](https://northflank.com/pricing) |
| HTTP data API | Not supported | "Managed databases are reached over their native protocols; no HTTP data/query API." [source](https://northflank.com/docs) |
| OpenAPI spec | Supported | "You can access Northflank's OpenAPI specification and schemas via the following endpoints: https://api.northflank.com/v1/swagger-json" [source](https://northflank.com/docs/v1/api/use-the-api) |
| Private container registry | Partially supported | "Image storage by default uses the Northflank PaaS, with project scoped image access control." [source](https://northflank.com/security) |
| Public API | Supported | "The API is available at https://api.northflank.com/v1/ ... Requests and responses are both in JSON." [source](https://northflank.com/docs/v1/api/use-the-api) |
| SDK | Supported | "npm install @northflank/js-client ... pip install northflank." [source](https://northflank.com/docs/v1/application/sandboxes/quickstart) |
| SSH access | Supported | "Access your Cloud Harness from your terminal, Visual Studio Code, or Cursor using SSH ... northflank dev ssh --projectId harness --harnessId numerous-class; docs page 'Access services with SSH'." [source](https://northflank.com/docs/v1/application/cloud-harness/quickstart) |

### Compute & storage

| Capability | Status | Evidence |
| --- | --- | --- |
| Cloud-init / ignition config | Partially supported | "BYOC node pools on AWS can now use your own EC2 launch templates, so nodes can be provisioned with your own AMI, user data, storage, and network configuration." [source](https://northflank.com/changelog/august-and-september-2026) |
| Desktop / computer-use sandbox | Not supported | "No virtual-desktop / computer-use sandbox." [source](https://northflank.com/docs) |
| GPU compute | Supported | "NVIDIA L4 24GB $0.80/hour, A100 40GB $1.42, A100 80GB $1.76, H100 80GB $2.74, RTX PRO 6000 96GB $3.00 / hour; time-slicing & MIG." [source](https://northflank.com/pricing) |
| Live-state (memory) snapshots | Not supported | "Container snapshots capture the filesystem of a running or terminating service pod; no memory/process-state snapshot or restore is documented." [source](https://northflank.com/changelog/august-and-september-2026) |
| Multi-region | Supported | "Northflank currently supports the following regions: Africa South, Asia East, ... US West California (17 regions) — plus BYOC into any provider region." [source](https://northflank.com/docs/v1/application/run/deploy-to-a-region) |
| Object storage | Supported | "Managed object storage: Provision managed, S3-compatible object storage buckets on Northflank, with automatic domain allocation. This capability is an off-ramp from Minio addons on PaaS." [source](https://northflank.com/changelog/may-and-june-2026) |
| Persistent disk | Supported | "Volumes and persistence: Easily attach, scale and mount persistent disks to your workloads ... Multi read write volumes: High performance ReadWriteMany (RWX) volumes for AI & stateful workloads. Disk $0.15 / GB / month." [source](https://northflank.com/pricing) |
| Sandbox templates / custom images | Supported | "Sandboxes deploy from any container image built on Northflank (Dockerfile/buildpacks) or pulled from an external registry; Cloud Harness supports custom runtime images." [source](https://northflank.com/docs/v1/application/sandboxes/quickstart) |
| Scale to zero | Partially supported | "Pausing a sandbox scales it to zero instances, which stops compute charges. Volumes attached to a paused sandbox continue to be billed." [source](https://northflank.com/docs/v1/application/sandboxes/sandboxes-on-northflank-cloud) |
| Selectable isolation runtime | Partially supported | "Services, jobs, addons, and builds can each use their own sandboxing mode, with support for Kata microVMs, gVisor or no sandboxing." [source](https://northflank.com/changelog/august-and-september-2026) |
| Snapshots / forking | Supported | "Container snapshots: You can now capture the filesystem of a running or terminating service pod and restore a service from a successful snapshot. Snapshots are available through the dashboard, CLI, and API and require a Kata runtime." [source](https://northflank.com/changelog/august-and-september-2026) |

### Data

| Capability | Status | Evidence |
| --- | --- | --- |
| Database branching | Partially supported | "Fork databases: Create a new database from the existing state of another (forks can use the latest available backup)." [source](https://northflank.com/docs/v1/application/databases-and-persistence/fork-an-addon) |
| Ephemeral instant DB (no-signup) | Not supported | "Databases need an account/project; no signup-free instant database." [source](https://northflank.com/pricing) |
| First-party database | Supported | "Datastores you know and love: PostgreSQL, MySQL, MongoDB®, Redis®, and more; high availability, backups, zonal redundancy." [source](https://northflank.com/pricing) |
| Vector search | Partially supported | "VectorDBs like pgvector" [source](https://northflank.com/) |

### Platform & operations

| Capability | Status | Evidence |
| --- | --- | --- |
| Managed CI/CD runners | Not supported | "Northflank runs its own CI builds ('Replacement for Jenkins, GitHub Actions ...') but offers no drop-in GitHub Actions / GitLab runner VMs." [source](https://northflank.com/security) |
| Built-in observability | Supported | "Real-time log tailing, real-time metrics, log search, 30 day retention, log sinks, alerting, health checks, audit logs, GPU charts." [source](https://northflank.com/docs/v1/application/observe/observability-on-northflank) |
| Preview environments | Supported | "Set up preview blueprints ... Spin up ephemeral and preview environments from pull requests (services + addons, teardown on expiry)." [source](https://northflank.com/docs/v1/application/release/pipeline/set-up-a-preview-environment) |
| Scheduled tasks | Supported | "Jobs: Run your code on a cron schedule or as a one off; cron-scheduled template/workflow triggers." [source](https://northflank.com/pricing) |
| Project template marketplace | Partially supported | "Stack Templates: Curated templates to deploy your favourite application stacks on Northflank in a single click (categories incl. Framework, CMS, AI, DevOps)." [source](https://northflank.com/stacks) |
| Durable workflows | Partially supported | "Workflows: Automated workflows with triggers for advanced releases, data pipelines, backups and more." [source](https://northflank.com/docs/v1/application/release/configure-workflows) |

## Agent readiness

### Read: 9 of 11 signals present

9/11 signals (8 full, 2 partial)

- Llms txt: pass — "Apex /llms.txt 404s, but /docs/llms.txt (text/markdown, 76 KB, ~705 links) is a structured index of every docs + API page as .md with an 'AI and agent ready' usage section. Rubric v3: a docs-path llms.txt earns full credit (was partial under v2)."
- Llms full txt: partial — "No single full dump: apex /llms-full.txt 404, /docs/llms-full.txt is a soft 404 (HTTP 200 'Not found' page). Every docs page is available as .md via the llms.txt index (modular set)."
- Robots AI policy: partial — "robots.txt is 'User-Agent: *' with no Disallow and no AI UA named: silent default-allow."
- JSON LD: fail — "No <script type=application/ld+json> on the homepage."
- Sitemap: pass — "robots.txt declares /sitemap_index.xml, /sitemap.xml (4,958 URLs) and /docs/sitemap.xml; lastmod 2026-10-07."
- Meta quality: pass — "Title 'Northflank — The runtime platform for AI-native companies'; description 'Run AI agents, services, databases, and GPUs in secure microVMs ...'; full OG set."
- Markdown negotiation: pass — "Docs pages return Content-Type text/markdown on 'Accept: text/markdown' and at '<url>.md' (documented in llms.txt). Homepage stays HTML."
- Content efficiency: pass — "Server-rendered homepage: ~7.7 KB readable text in 66 KB HTML (~11.6%)."
- Docs discoverable: pass — "Docs in the top nav, reachable without JS."
- Pricing machine readable: pass — "Unit rates (vCPU/memory/GPU/egress/disk), 22 named compute plans with $/month and $/hr, and a tier feature matrix in server-rendered HTML."
- Anti bot: pass — "No challenge on public pages, docs, well-known files or the API spec (curl + firecrawl fetched cleanly)."

### Drive: 8.5 of 11 signals present

8.5/11 signals (7 full, 3 partial)

- Public API: pass — "REST API at api.northflank.com/v1 with per-endpoint docs (projects, services, jobs, addons, volumes, sandboxes, BYOC, billing, tokens)."
- Openapi spec: pass — "https://api.northflank.com/v1/swagger-json returns OpenAPI 3.0.1 (title 'Northflank API', 518 paths), linked from 'Use the API'. Was fail in June."
- MCP server: fail — "No MCP server: /.well-known/mcp 404, 0 'MCP' hits in /docs/llms.txt, none in the skills README. 'MCP' on the homepage is a hosted workload type."
- SDK packages: pass — "Two official SDKs: @northflank/js-client (npm 0.11.0) and northflank (PyPI 2.0.0, 2026-09-22). Was partial in June."
- Auth docs: pass — "Bearer-token auth documented; API roles with granular permissions; team/org tokens; 'x-nf-permission-required' per operation in the OpenAPI."
- Agent self serve creds: partial — "First API token is created by a human in the dashboard; the API can then list tokens and rotate/delete keys (POST /v1/tokens/{tokenId}/keys) but not mint a new token from nothing."
- Webhooks: pass — "Webhook notification integrations documented (event types, POST body, X-Northflank-Notification-Integration-* headers) with a shared secret sent as X-Northflank-Notification-Integration-Token for origin verification (shared secret, not an HMAC signature). Was partial in June."
- CLI tool: pass — "Official @northflank/cli (npm 0.13.0); 'northflank dev ssh', exec, copy files, log tailing."
- Error model: partial — "Errors return JSON ({"error":{"status":401,"message":"Unauthorized"}} observed live); the OpenAPI documents 4xx codes by description only, with no error schema page."
- Rate limit docs: pass — "'default rate limit of 1000 requests per hour' plus x-ratelimit-limit / x-ratelimit-remaining / x-ratelimit-reset headers."
- Agent config: partial — "One surface: the northflank/skills package (Claude Code plugin marketplace, Codex skill-installer, skills.sh). No AGENTS.md, /.well-known/agent or ARD catalog. Re-read from pass: June also counted llms.txt/markdown, which are parse signals."

## Coding harnesses

- Claude Code (Anthropic) — "Claude Code: /plugin marketplace add northflank/skills ; /plugin install northflank@northflank. Also a Cloud Harness agent: 'Choose Claude Code, OpenAI Codex, Cursor, OpenCode or Pi' (Aug-Sep 2026 changelog)." [source](https://northflank.com/docs/v1/application/ai-agents/agent-skills)
- Codex CLI (OpenAI) — "OpenAI Codex: $skill-installer https://github.com/northflank/skills/tree/master/skills/northflank ; Cloud Harness runs 'coding agents like Claude or Codex'." [source](https://northflank.com/docs/v1/application/ai-agents/agent-skills)
- Cursor (Anysphere) — "Choose Claude Code, OpenAI Codex, Cursor, OpenCode or Pi ... connect through the browser terminal or SSH. Skill directory ~/.cursor/skills/; Cloud Harness reachable from Cursor over SSH." [source](https://northflank.com/changelog/august-and-september-2026)
- OpenCode (opencode) — "Choose Claude Code, OpenAI Codex, Cursor, OpenCode or Pi (Cloud Harness); skill directory ~/.config/opencode/skills/." [source](https://northflank.com/changelog/august-and-september-2026)
- Pi (earendil-works) — "For a coding agent, an account or API key (Claude, Codex, Pi, or your own agent)." [source](https://northflank.com/docs/v1/application/cloud-harness/quickstart)
- Windsurf (Codeium) — "Manual installation ... | Windsurf | ~/.windsurf/skills/ |" [source](https://northflank.com/docs/v1/application/ai-agents/agent-skills)

Plausible compatibility (derived, not stored):

- Aider
- Amp
- Antigravity
- Devin
- Droid
- Gemini CLI
- Goose
- Hermes Agent
- Kilo Code
- Kiro CLI
- Qwen Code

## Compliance & regions

- SOC 2 Type II: certified (scope: hosted) — "SOC 2: Yes ... Northflank has achieved SOC 2 Type 2 compliance, demonstrating that the platform meets rigorous independent standards for security, availability, and confidentiality." [source](https://northflank.com/security)
- HIPAA: enterprise-only (scope: hosted) — "HIPAA: Yes ... Northflank is HIPAA compliant ... Under an Enterprise contract, we support Business Associate Agreements (BAAs) and provide the technical and organisational safeguards needed to run healthcare workloads securely on the platform." [source](https://northflank.com/security)
- Regions: Africa South (EMEA (africa-south)), Asia East (Asia Pacific (asia-east)), Asia Northeast (Asia Pacific (asia-northeast)), Asia South Delhi (Asia Pacific (asia-south-delhi)), Asia Southeast (Asia Pacific (asia-southeast)), Australia Southeast (Asia Pacific (australia-southeast)), Canada Central (Americas (canada-central)), Europe West (EMEA (europe-west)), Europe West Frankfurt (EMEA (europe-west-frankfurt)), Europe West Netherlands (EMEA (europe-west-netherlands)), Europe West Zurich (EMEA (europe-west-zurich)), Southamerica East (Americas (southamerica-east)), US Central (Americas (us-central)), US East Ohio (Americas (us-east-ohio)), US East1 (Americas (us-east1)), US West (Americas (us-west)), US West California (Americas (us-west-california))
- Regions note: 17 Northflank Cloud regions (API ids in parentheses), region fixed per project; free-tier worker clusters on Azure, paid on GCP; control plane GCP London/Amsterdam. GPU availability varies by region (e.g. L4 in Netherlands, H100 in Frankfurt, RTX PRO in US West). Plus BYOC into any AWS/GCP/Azure/Oracle/CoreWeave/Civo/Nebius region ('6+ cloud regions, 600 BYOC regions', '330+ availability zones').

## Company & presence

- Headquarters: London, UK (20-22 Wenlock Road, N1 7GU)
- Founded: 2019 (company formed 1 April 2019; 'running microVMs in production since 2021' per the 2026-05 intel)
- Team size: Not disclosed. Platform metrics: 'Millions of containers', '130B+ requests processed', '100k+ developers in production' (was '80k+' in June), '330+ availability zones', 'Trusted by 2,000+ start-ups and enterprises'.
- Privacy policy: https://northflank.com/legal/privacy
- Terms of service: https://northflank.com/legal/terms
- GitHub: https://github.com/northflank
- X / Twitter: https://x.com/northflank
- Blog: https://northflank.com/blog
- Changelog: https://northflank.com/changelog
- Guides: https://northflank.com/guides
- Stack templates: https://northflank.com/stacks
- Status: https://status.northflank.com/
- Trust Center: https://trust.northflank.com/
- Docs: https://northflank.com/docs
- skills.sh: https://skills.sh/northflank/skills
- PyPI: https://pypi.org/project/northflank/
- npm: https://www.npmjs.com/package/@northflank/js-client

## Nearby in the atlas

- [Aptible](/products/aptible.md)
- [Canine](/products/canine.md)
- [DigitalOcean App Platform](/products/digitalocean-app-platform.md)
- [Fly.io](/products/fly-io.md)
- [here.now](/products/here-now.md)
- [INK](/products/ink.md)

## Method

Facts come from the product's own public pages. Each claim carries its evidence: a quote and the page it came from. We count capabilities rather than grade products, and "Not assessed" means we have not checked, never that the product lacks it.