Satama is the quiet plumbing between your laptop and production: a private Docker registry, OpenBao for secrets, S3-compatible buckets for artifacts — sharing one OIDC identity, one billing line, one domain you actually own.
No assembling a dozen vendors, no per-seat pricing for each one. Just the building blocks of a modern delivery pipeline — hosted, secured, and shared from a single domain.
OCI-compliant, docker push works out of the box. Per-project namespaces, read-only or contributor scopes, and retention policies that keep the last N tags or any regex you care about. Automatic layer GC every night.
Versioned KV, transit engine, and dynamic database creds — fronted by the same OIDC provider as the rest of the platform.
We issue RS256 tokens with a policy claim, MinIO and OpenBao trust the JWKS, and your team stops juggling five sets of credentials. Bring your own IdP or use the built-in provider.
Snapshots of registry blobs, MinIO buckets, and the Postgres that stitches it together — encrypted, offsite, and verified by a quarterly restore drill so you're not learning about your backup strategy on the worst day of the quarter.
Every image, every tag, every pull. Inspect manifests, diff layers, set retention — all in the browser, all from the same login your CLI uses.
Pay per workspace, not per seat. Unlimited collaborators on every plan. No setup fees, cancel whenever.
We're onboarding ~20 teams a week. Tell us what you're building and we'll open your workspace within a few days.