Studio Ardenstudioarden.example
LiveHost your websites.
Own the server.
Your sites, apps and open-source tools. On a server in your own cloud. Nuvlo handles the setup, security and everything in between.
1 server, 1 site. No card, no time limit.
Notifications
- Backups finished on fsn-web-0112 minutes ago
- HTTPS certificate renewed for hotel-linde.example3 hours ago
- Security updates installed on ams-app-01Yesterday
Overview
Status of your sites and servers.
- Sites
- 6
- Servers
- 5
- Recent deploys
- 48
- Need attention
- 0
In this workspace
Connected infrastructure
Latest 50 deployments
Sites, servers, and deploys
Your sites
Slow Clayslowclay.shop
Live
Hotel Lindehotel-linde.example
Live1–3 of 6 sites
Resource usage
Updated within the last 2 minutes
14%
CPU42%
Memory31%
DiskAverage of the latest readings from 5 of 5 servers.
Server costs
Hourly usage€62.99 monthly cap
Fixed contractsMonthly equivalent
€8.49/moThe Nuvlo way
Bring your server. Bring your ideas. Nuvlo connects the pieces and takes care of the work in between.
01
You keep the keys.
Choose your cloud provider. The account, the server and root access stay yours.
02
We handle the upkeep.
WordPress, Node apps and one-click tools. Setup, SSL, deployments and backups, together in one dashboard.
How it works
Your cloud, your code, your domain. One continuous path to online.
Connect your cloud
Paste an API key from Hetzner, DigitalOcean, AWS or seven other clouds. The server is created in your account and billed there.
Try it: pick a providerNuvlo prepares the server
Firewall, key-only sign-in, the web server and automatic security updates. Set up for you, no terminal needed.
Add your site
Install WordPress, connect a Git repository or pick a one-click app. Frameworks are detected and every push deploys.
Try it: pick how you add itIn its own containersPoint your domain. You’re live.
HTTPS is issued once the domain points at the server, and renewed on its own.
Deploys
Every time you push to GitHub, Nuvlo builds the new version next to the old one and switches over in an instant. If the new version doesn’t start, the previous one comes back on its own.
fold-lighting / main
$ git push origin main
- Repository connected
- Dependencies installed
- Production build complete
- Release is live
Deployed. Ready for the world.
From a Git push to a live site.Illustrative deployment
- Deploy on push
- Connect a GitHub repository and every push to the tracked branch ships on its own.
- Deploy hooks
- A secret URL per site, so any CI pipeline or CMS can trigger a release.
- Branches and variables
- Switch the tracked branch, edit environment variables, redeploy or cancel from the site page.
- One-click rollback
- Earlier releases stay on disk. Rolling back is the same atomic switch, in reverse.
Frameworks and package managers are detected, monorepo folders included.
NuxtNext.jsRemixSvelteKitAstroExpressHonoNode.jspnpmBunOwnership
Your code, your cloud account and your domain go in. A secure server, a live site and off-site backups come out. Visitors go straight to your server, never through Nuvlo, so if you leave, everything keeps running.
Your repositoryGitHub, GitLab or Bitbucket
Your cloud accountHetzner, DigitalOcean and 8 more
Your domainCloudflare or any DNS
A secure serverIn your account, billed to you
Your site on HTTPSUpdated on every push
Backups in your bucketS3, R2, B2 and more
WordPress
Each WordPress site gets its own containers, database and cache. Manage the whole stack without maintaining it by hand.
- Isolated per site
- nginx, PHP-FPM, MariaDB and Redis run in containers that belong to one site only.
- PHP 8.0 to 8.5
- Switch versions per site and tune PHP settings without touching the server.
- One-time admin login
- Open wp-admin from the dashboard with a single-use link. No shared passwords.
- Fast without another plugin
- The Nuvlo plugin adds a page cache that clears itself, deferred scripts, lazy images and local Google Fonts.
Headless WordPress
Editors keep the WordPress they know. Visitors get the fast site you built with your own framework. Nuvlo hosts both and connects them.
- Both on your server
- WordPress runs at cms.your-domain, your frontend at your domain. Nuvlo deploys the frontend with WORDPRESS_URL, SITE_URL and a signing secret already set.
- Only the frontend in search
- WordPress stays out of search results and sends its visitors to the same page on the frontend. The admin and logins stay where they are.
- Shops keep working
- WooCommerce tells the frontend about product changes right away. Order, account and password-reset links point at the frontend.
Frontends
- Nuxt
- Next.js
- Astro
- SvelteKit
- React Router
- Vue
Nuvlo SEO for WordPress
A WordPress plugin Nuvlo installs with one click. It writes what search engines and AI assistants read, and tells you page by page what is still missing.
- Titles and descriptions
- Templates for every content type, with a search preview and a score on every page and product.
- Structured data
- Business, opening hours, articles, products with prices and reviews, FAQs and breadcrumbs, in one schema graph.
- Sitemaps and robots.txt
- Generated for you, with rules per group of AI crawlers.
- llms.txt
- A plain summary of your site for AI assistants, plus llms-full.txt with the full text.
- Redirects
- Added on their own when an address changes, with a log of pages that weren’t found.
- Classic or headless
- Imports from Yoast and Rank Math. Headless frontends read every tag from one API.
Operations
Backups, monitoring and updates keep running in the background, on the schedule you set, without a reminder in your calendar.
Backups that leave the server.
Hourly to monthly, in your timezone, Nuvlo copies your files and databases straight to your own storage bucket. Restore any of them with one click.
How backups work
fsn-web-01Hetzner · CX33 · Ubuntu 24.04Last hour
CPU31%Memory62%Disk41%Network3.2MB/s
CPUMemory
slowclay.shop · 30-day uptime99.98%Response time184 ms
Server updates0 of 5 up to dateReboot if required
- fsn-web-0123 packages · security Queued
- vie-wp-0231 packages · security Queued
- ams-app-0118 packages · security Queued
- hel-app-0218 packages · security Queued
- fra-db-0112 packages · security Queued
Server tools
The jobs you used to open a terminal for are a click away, and the terminal is still there when you want it.
A terminal in the browser
For owners and admins, in the dashboard only, never through an API token. It closes after 15 idle minutes, and every session is in the activity log.
Staging and copies
Copy a WordPress site to the same server or another one, on a free nuvlo.link address with HTTPS, hidden from search.
Resize in place
Pick a new plan. Nuvlo stops the server, changes it, starts it and checks it, and picks the job up again if Nuvlo itself restarts.
Snapshots and provider backups
Snapshots on all ten providers, with their size and cost. Daily provider backups on Hetzner, DigitalOcean, Vultr and Linode.
Services at a glance
See what each server runs and restart one service instead of the whole machine. New servers serve pages with Brotli.
Regions
Mix providers in one workspace and pick the region per server. Hover a provider to see where it can put yours.
Security
Hardening isn't a checklist you remember later. It is part of how every server is built, and it keeps running after launch.
Security scanhotel-linde.example · scheduled weekly18,402 files · 41s
Findings
- Quarantined
- Quarantined
- Review
Firewallfsn-web-01 · default deny incomingRule
22SSH · keys onlyTCP · from AnywhereAllow80HTTPTCP · from AnywhereAllow443HTTPSTCP · from AnywhereAllow5432Postgres from app serverTCP · from 10.0.0.4Allow
fail2ban on SSH3 failed attempts → banned for 2 hours
- Key-only SSH
- Password login is switched off on every server Nuvlo builds. Root accepts keys only.
- Default-deny firewall
- UFW blocks everything except SSH, HTTP and HTTPS. Add rules per port, protocol and source.
- Malware scans
- Webshell signatures, PHP in uploads, hidden eval and WordPress core checksums. Suspicious files are quarantined.
- Automatic security updates
- Unattended upgrades keep the OS patched between the rollouts you run yourself.
- Roles for your team
- Admin, Developer and Viewer roles, with permissions you can adjust per role.
- Scoped API tokens
- Give a token view or manage access to servers, sites, domains or the activity log, and nothing else.
- Two-factor sign-in
- Codes from an authenticator app. API tokens expire, and changing your password revokes them.
- 7G and 8G firewall rules
- Switch them on per WordPress site to stop common attacks in nginx, before they reach PHP.
- wp-config out of reach
- Database passwords live outside the web root, and only owners and admins can open the config editor.
AI
Nuvlo gives your coding agent a safe way in, checks every deploy for leaks, writes the fix as a pull request and keeps AI crawlers in line.
Agent access
Let your coding agent run the hosting.
Connect Claude Code, Cursor or any MCP client. Agents read logs, launch checks and crawler reports directly, then ask for the change they need.
Redeploys, rollbacks and crawler rules wait for your approval, unless you let a key approve changes that can be undone. Environment variables always wait.
- Claude Code
- Cursor
- Any MCP client
nuvlo · set_env_varWaiting for your approval
Claude Code wants to set a variableslowclay.shop · just now
STRIPE_WEBHOOK_SECRETAnswers right away
- Site logs
- Launch check
- AI crawler report
Asks you first
- Redeploy or roll back
- Crawler rules
- Environment variablesAlways asks
Launch check
Every deploy, checked for leaks.
After each deploy of an app, PHP or static site, Nuvlo looks at the live site the way an attacker would: keys in your JavaScript, database tables anyone can read, a public .env or .git folder, source maps. Every finding says what to do next.
For source maps, localhost URLs and secrets in public variables, AI writes the change as a pull request on GitHub. You review it before anything is merged.
Launch checkslowclay.shop · after deploy #2143 findings · 18s
- Fix now
- Fix now
- Worth fixing
Fix for “source code is public”1 file · 3 AI answers
nuxt.config.ts
- sourcemap: { client: true },+ sourcemap: { client: false }, Pull request #48 openedDeploys when you merge it
AI crawlers
You decide which AI bots read your sites.
See how often GPTBot, ClaudeBot, PerplexityBot and 60 more AI bots visit each site. Allow, slow down or block them per group, so AI search can still quote you while training crawlers stay out.
Rules are written to nginx on your server and rolled back on their own if the config test fails.
AI crawlershotel-linde.example · last 7 days
Share of requests18.4%Data sent to AI bots2.3 GBRefused296
- Training crawlersGPTBot, ClaudeBot, CCBot9,812 AllowSlow downBlock
- AI searchOAI-SearchBot, PerplexityBot1,204 AllowSlow downBlock
- Read on requestChatGPT-User, Claude-User318 AllowSlow downBlock
- Browsing agentsChatGPT Agent42 AllowSlow downBlock
- AI answers on monthly plans
- 50 a month on Starter, up to 300 on Agency. They explain findings, prepare fixes and plan site moves. A prepared fix uses three.
- Or bring your own key
- On any plan, Free and lifetime included: add an Anthropic or OpenAI API key in Settings and AI has no monthly limit. It is stored encrypted and never sent back to the browser.
- The checks run without AI
- Launch checks, crawler rules and agent access work on every plan, with or without AI answers left.
Workspace
Invite your team, switch between workspaces, and find anything with a keystroke. Every deploy, backup and change lands in one activity log.
Search pages, sites and servers…esc
- BackupsOperations
- Backup providersWorkspace
- Sites: Hotel Lindehotel-linde.example
- Sites: Slow Clayslowclay.shop
- SSL certificatesResources
- Server updatesOperations
Activity
AllDeploysSecurityServer- Lena deployed slowclay.shopmain · 8f3c21a
- Backup finished for hotel-linde.example1.84 GB to R2
- Scan quarantined 2 files on hotel-linde.exampleSecurity
- Jonas rolled back maisonoda.comto c41e07b
- Lena created server fra-db-01Vultr · Frankfurt
- Mira joined as DeveloperInvited by Lena
⌘K opens the command palette from any page in the dashboard.
Self-host the tools your team already pays for elsewhere. Nuvlo installs them on your server with a domain and HTTPS.
Browse all 20 appsWhy Nuvlo
Managed hosts rent you their servers with a margin. A bare server works too, until you have to maintain it.
| Feature | Nuvlo | Managed hosting | Your own server, by hand |
|---|---|---|---|
| Cost and ownership | |||
| Who owns the server | Yes, You, in your cloud account | No, The host | Yes, You |
| What the hardware costs | Yes, The provider’s list price | No, Provider price plus margin | Yes, The provider’s list price |
| Root access | Yes, Yes | Partly, Rarely | Yes, Yes |
| Leaving | Yes, Servers keep running | No, Migrate every site | Yes, Nothing to move |
| Day to day | |||
| Setup and hardening | Yes, Automatic | Yes, Done by the host | No, Your own scripts |
| Git deploys with rollback | Yes, Built in | Partly, Depends on the plan | No, Build it yourself |
| Backups | Yes, To your own bucket | Partly, On the host’s storage | No, Script them yourself |
| Staging copies | Yes, On a free nuvlo.link address | Partly, Depends on the plan | No, Copy it by hand |
| Leak check after deploys | Yes, Fixes as pull requests | Partly, Depends on the host | No, Build it yourself |
| AI crawler rules and agent access | Yes, Changes wait for approval | Partly, Depends on the host | No, Build it yourself |
Cost and ownership
Who owns the server
- Nuvlo You, in your cloud account
- Managed hosting The host
- Your own server, by hand You
What the hardware costs
- Nuvlo The provider’s list price
- Managed hosting Provider price plus margin
- Your own server, by hand The provider’s list price
Root access
- Nuvlo Yes
- Managed hosting Rarely
- Your own server, by hand Yes
Leaving
- Nuvlo Servers keep running
- Managed hosting Migrate every site
- Your own server, by hand Nothing to move
Day to day
Setup and hardening
- Nuvlo Automatic
- Managed hosting Done by the host
- Your own server, by hand Your own scripts
Git deploys with rollback
- Nuvlo Built in
- Managed hosting Depends on the plan
- Your own server, by hand Build it yourself
Backups
- Nuvlo To your own bucket
- Managed hosting On the host’s storage
- Your own server, by hand Script them yourself
Staging copies
- Nuvlo On a free nuvlo.link address
- Managed hosting Depends on the plan
- Your own server, by hand Copy it by hand
Leak check after deploys
- Nuvlo Fixes as pull requests
- Managed hosting Depends on the host
- Your own server, by hand Build it yourself
AI crawler rules and agent access
- Nuvlo Changes wait for approval
- Managed hosting Depends on the host
- Your own server, by hand Build it yourself
- Included
- Partly, or it depends
- Not available
Nuvlo next to Ploi, Forge, RunCloud, Coolify, xCloud and ServerAvatar
Cost
You pay your cloud company for the server and Nuvlo for the software that runs it. Both are small, and your first server is free on Nuvlo.
Your server
You rent it from a cloud company you pick, like Hetzner or DigitalOcean. They bill you directly, at their normal price. It’s yours.
€4.79 a month for a Hetzner server
Nuvlo
Sets up the server and runs your sites on it: updates, backups, SSL and monitoring.
Free for your first server and 1 site, then from €12 a month
10 WordPress sites, for example
Managed hosting at Kinsta$225 a month
Your own server with NuvloCX33 at Hetzner €7.79 + Nuvlo Starter €12€19.79 a month
- No card to startNuvlo Free has no time limit.
- No lock-inIf you leave, your servers and sites stay in your cloud account and keep running.
- Cancel any timeA paid plan runs to the end of the month you paid for.
Is Nuvlo free?
Yes, for one server and 1 site, with no time limit. Paid plans start at €12 a month for more servers and sites and include AI answers; inviting your team starts on Pro. Your cloud provider bills the server itself, from under €4 a month.
Can I cancel at any time?
Yes, from the billing page. Your plan runs until the end of the period you paid for, then the account moves to Free. If you have more than Free includes, you get three days to choose what Nuvlo keeps managing. The rest keeps running on your server, but Nuvlo stops deploying, backing up and updating it.
Can I get a refund?
A lifetime license is refunded in full within 14 days, with one click on the billing page, once per customer. If you bought a plan as a private person, you can withdraw within 14 days and get back what you paid, minus the days used or the plan’s AI answers used, whichever is more. Plans bought as a business aren’t refunded, but you can cancel any time. Details are in the refund policy.
Do my sites depend on Nuvlo being online?
No. Visitors reach your server directly, never through Nuvlo, so your sites stay up even if the dashboard is unreachable. Deploys and scheduled backups simply wait until it’s back.
What happens if I stop using Nuvlo?
Your sites keep running. Servers stay in your cloud account as standard Ubuntu servers with nginx, you keep root access, and your backups are in your own bucket. There is nothing to export.
Do I need my own cloud account?
To create new servers, yes. Connect Hetzner, DigitalOcean, Vultr, Linode, UpCloud, Scaleway, Exoscale, AWS, Google Cloud or Contabo. Servers are created in your account and billed by the provider directly, with no markup. Already have an Ubuntu server somewhere else? Connect it over SSH with one command.
Do I need to know Linux?
No. Pick a provider, region and size, and Nuvlo creates the server, installs the web stack and hardens it. SSH is there if you want it.
What can I host?
WordPress, Node apps (Nuxt, Next.js, Remix, SvelteKit, Astro, Express, Hono), static sites, PHP, Laravel and Symfony, plus 20 one-click open-source apps.
Is my server secure?
Every server gets key-only SSH, a default-deny firewall, fail2ban and automatic security updates, and malware scans you can schedule per site. You keep root access.
Where do backups go?
Straight from your server to your own bucket on S3, R2, B2, Wasabi and others, on a schedule from hourly to monthly. Restore with one click.
Your first server and site are free, with no card and no time limit. Connect a provider token and Nuvlo starts building it.