Joch
All products
CommercialJoch Cloud

Your runtime. Our control plane.

Joch Cloud is the hosted, multi-tenant control plane. The control plane lives with us; your agents and runtimes stay where they are. Wired up over a customer-runtime tunnel so no inbound port is required.

// Capabilities

Hosted control plane

01

Multi-region, multi-tenant. SSO, SCIM, RBAC. Audit export to your SIEM. SLA-backed.

Customer-runtime tunnel

02

Outbound-only WebSocket tunnel from your environment — no inbound ports, no firewall changes.

Managed retention

03

Trace and AgBOM retention up to 90 days on Team, custom on Enterprise. Export anytime.

Approval routing

04

Slack and email approval routing with reply-to-approve, mention-to-deny, full audit.

// What's included

  • Everything in the open-source core
  • Hosted Console with custom domain
  • SSO / SCIM / advanced RBAC
  • Multi-region trace + AgBOM storage
  • Customer-runtime tunnel (free)
  • Audit export to SIEM (S3, Splunk, Datadog, Elastic)
  • Premium connectors (Jira, ServiceNow, PagerDuty)
  • Business-hours support · 99.9% SLA

// Operator's view

joch — joch cloud

Harness this surface today.

Install the open-source core or start on Cloud — same control plane, same audit trail.