Orbinx LogoOrbinx
Try now
system operationalnew: autonomous PR repair

Your self-hosted AI DevOps engineer.

Orbinx monitors your Coolify deployments, diagnoses failures with LLMs, tests fixes in isolated sandboxes, and opens pull requests — autonomously. Open-core. Self-hosted. Yours.

$docker run -d orbinx/orbinx:latest
Coming Soon
orbinx · live console
region: fra1connected
services · 7
  • api-gateway
    24ms
  • billing-svc
    41ms
  • web-app
    —
  • worker-queue
    1.2s
  • postgres
    3ms
  • redis
    1ms
  • cdn-edge
    12ms
active incident · web-appT+00:14
alertredactdiagnosesandboxpull request
diagnosing null-pointer in checkout.handler.ts:42step 3/5
pull request
fix#412

Handle null user session in checkout handler

+24−8· 3 files
chore#411

Bump postgres driver to 3.2.1

+12−12· 1 file
sandbox · running17s
coolify · 3 apps·1 incident·uptime 99.97%
orbinx-agent v0.4.2
works with your existing stack
CoolifyGitHubDockerOllamavLLMPostgresRedisNext.jsOpenTelemetryTailscaleVaultSOPSCoolifyGitHubDockerOllamavLLMPostgresRedisNext.jsOpenTelemetryTailscaleVaultSOPS
The autonomous loop

From crash log to pull request, in five stages.

Each incident flows through the same deterministic pipeline. You can audit every step, override any decision, and replay the entire trace. No magic — just engineering.

stage 01 / 05
Catch the failure
incident opened
live tracestreaming
›[14:02:17] POST /webhook/coolify
›[14:02:17] build_status: failed
›[14:02:18] app: web-app · env: prod
›[14:02:18] opening incident #inc-2204
up next02 · REDACT
Capabilities

Not just alerts.
A complete repair loop.

Most monitoring tools stop at a notification. Orbinx keeps going — diagnosing, fixing, testing, and shipping. Every capability runs on your own infrastructure.

capability

Real-time Coolify monitoring

Webhooks, build events, container health, and runtime metrics stream in continuously. No agents to install on your apps — Orbinx listens where Coolify already speaks.

coolify · 3 apps · 6 serviceslive
api-gateway
billing-svc
web-app
worker-queue
postgres
redis
capability

Self-hosted LLM diagnosis

Bring your own model — local Ollama, vLLM, or a private API. Your code never leaves your network.

inferencelocal · 8.2 GB
llama-3.1-70b
Q4_K_M
qwen-2.5-coder-32b
Q5_K_M
deepseek-coder-v2
Q4_K_M
capability

Secret redaction, by default

Tokens, keys, PII, and connection strings are masked before any model sees them. Reversible only inside your perimeter.

redaction12 secrets
envDATABASE_URL[REDACTED]
envSTRIPE_KEY[REDACTED]
loguser email[PII]
logjwt token[REDACTED]
capability

Isolated code-execution sandboxes

Each candidate fix runs inside an ephemeral container with a fresh checkout, your test suite, and a strict resource budget. Sandboxes are destroyed after every run.

sandbox · sbx-3f2arunning
0.0scontainer.create(node:20-alpine)
0.4sgit.checkout(main) · 1,204 files
0.9spatch.apply(checkout.handler.ts)
1.1stest.run --filter=checkout
4.2s142 passed · 0 failed
4.6sartifact.staged
capability

Pull requests, not auto-merges

Orbinx ships branches with diffs, test evidence, and diagnosis notes. Your reviewers keep the merge button.

pull request · #412open
fix: handle null session in checkout handler
+24−8· 3 files changed
checkout.handler.ts+18−4
checkout.test.ts+6−4
session.ts
capability

Auditable to the byte

Every prompt, every tool call, every sandbox command is logged and replayable. Compliance without the spreadsheets.

audit trail · inc-220447 events
14:02:17incident.opened
14:02:18logs.redacted · 12 secrets
14:02:21llm.prompt · 4,201 tokens
14:02:34llm.response · hypothesis
14:02:35sandbox.created
14:02:40patch.applied
14:02:44tests.passed · 142/142
14:02:45pr.opened · #412
Zero-config diagnostic engine

Instant root-cause analysis.
Zero credentials leave your network.

Logs are scanned and redacted in-place before anything reaches a model. Orbinx ships with sensible defaults for tokens, keys, PII, and connection strings — and you can extend the rules with regex.

In-place redaction

A streaming redactor walks every log line, masking anything that matches a secret pattern. The original is never written to disk outside your perimeter.

Reversible only on your side

A sidecar key map keeps the mapping — Orbinx never uploads it. Disable the model call entirely and the redacted context is still useful for human review.

Bring your own model

Point Orbinx at Ollama, vLLM, TGI, or any OpenAI-compatible endpoint. We do not phone home, and we do not require a managed account.

BYO credentials, your way

Vault, SOPS, age-encrypted files, plain env — Orbinx reads secrets the same way your apps do, and never logs them in plaintext.

orbinx · diagnose --incident 2204
live
$

fix: handle null session in checkout handler

open
orbinx/fix-inc-2204→main·+24−8· 3 files
diagnosisnull sessionconfidence0.94sandbox142/142 ✓rollbackrevert.patch
@@ -38,7 +38,13 @@ export async function handleCheckout(req, res) {
const session = await getSession(req);
− const userId = session.user.id;
+ if (!session?.user) {
+ return res.status(401).json({ error: 'unauthenticated' });
+ }
+ const userId = session.user.id;
const cart = await getCart(userId);
OK
olivia.k · reviewer requested
OB
orbinx-agentcommented 14:02:45

Detected a TypeError caused by an unguarded session access. The patch adds a 401 fast-fail and a regression test for the guest path. Sandbox ran 142 tests in 4.2s · 0 failures.

auto-generated · linked to inc-2204
Developer-first governance

You remain in control.
Always.

Orbinx proposes — you dispose. Fixes arrive as branches with full diffs, test evidence, and rollback plans. Nothing is merged without your reviewers.

No auto-merge, ever

The merge button stays with your team. Orbinx opens branches and waits for human review — by default.

Diff in plain sight

Every PR ships with a structured diff, the diagnosis that produced it, and a one-click rollback patch.

Per-repo policies

Allow Orbinx on critical services, gate it on staging, or block it entirely. Policies are git-versioned.

Sandbox receipts

Each PR includes the full sandbox trace: container image, commands run, test output, resource usage.

avg diagnosis time
0s
credentials leaked
0
tests run per fix
0+
self-hosted by default
0%
Private Beta · Source Available

Self-hostable architecture.
Fully auditable & secure.

Orbinx runs entirely on your own infrastructure with zero third-party telemetry. While it is not yet open-source, the source code is fully accessible for security audits, local customizations, and hosting on your own nodes.

Beta access
Private
repository structure
Monorepo
license status
Pending
native integration
Coolify
Try nowRead the self-hosting guide
repo structure
main · clean
▸orbinx/
▸packages/
▸pipeline/core
▸worker/sandbox
▸coolify/adapter
▸web/dashboard
▸types/
▸docs/
▸scripts/
▪LICENSEpending
▪README.md
sourceAll packages self-hostablependingBSL or AGPL planned license
ship your first PR in 5 minutes

Stop babysitting incidents.
Start shipping fixes.

Bring your own model, your own repo, your own reviewers. Orbinx runs entirely on your infrastructure — the only outbound call is the one you make to GitHub.

$docker run -d -p 8080:8080 orbinx/orbinx:latest
Coming Soon
Try nowDocs
< 5 min
to first PR
0
egress calls
Pending
license