Home/Platform

The tech stack behind every deploy.

The runtime we built, the architecture around it, the regions it runs in and how it keeps your code safe. All of it is ours to run, so there is nothing for you to install or patch.

RuntimeArchitectureTech stackRuntimesNetworkSecurity
Tayang Runtime

Six layers.
Every one of them ours.

Hover or tap a layer to see what it does. Requests travel from the top down. At the center sits tayang-agent, the Rust process that replaces the usual web server, process manager and container runtime.

<15 MBagent memory at idle
0 sdowntime when a release swaps
1 binaryreplaces Nginx, PM2 and Docker
8 runtimesdetected from your code
Architecture

How a deploy travels
through Tayang.

The control plane decides, the build servers prepare, and the runtime serves. Your site ends up on the edge or on a Tayang server in your region. Nothing runs on your machine.

1 · You

DashboardWeb app, in your language
AI assistantsClaude, ChatGPT, Gemini via MCP
Git, CLI, editorGitHub, GitLab, VS Code, Cursor
REST APIBuild your product on top

2 · Control plane

API & MCP serverAuth, projects, deploy plans
Project detectionRuntime, version, database
Job queueBuilds, scans, server tasks
BillingLocal currency and methods

3 · Build

Build serversOne-time sandbox per build
Build cacheFaster repeat deploys
Security scanSecrets, debug mode, phishing
Signed artifactReady-to-run output

4 · Run

Edge networkDNS, SSL, CDN, firewall
Static & JS appsServed from the edge
Tayang Runtime · 3 regionsPHP, Go, Rust, Java, Python, Node
Databases & backupsDaily backups, tested restores
Tech stack

What we built it with,
and why.

LayerTechnologyWhy
Control planeCloudflare WorkersD1QueuesDashboard, API and MCP server run globally with no servers to babysit.
Edge hostingR2Workers for PlatformsCloudflare for SaaSStatic files and light apps cost almost nothing to serve. Custom domains get SSL automatically.
Server agentRusttokiosystemdcgroup v2Uses under 15 MB of RAM at idle. Apps run as native processes, without Docker.
Proxy & SSLhyperrustlsACMEBuilt into the agent, so there is no Nginx or Caddy to configure.
RuntimesPHP-FPM 7.4–8.4Node LTSGoRustJava (Temurin)PythonPick the version per project. Quiet apps can sleep and wake on the first request.
DatabasesMySQLMariaDBPostgreSQLRedisMongoDBCreated on demand. Credentials go straight into your environment variables.
Edge to databaseCloudflare TunnelHyperdriveEdge apps reach your database without opening a single port to the internet.
BuildsFirecracker microVMgVisorR2 cacheYour code builds in a sandbox that is thrown away afterwards. Your server never runs out of memory building.
BackupsResticR2Daily, encrypted, and restored on a schedule to prove they work.
Agent securityEd25519mTLSaudit logEvery command is signed by Tayang and recorded in a log you can read.
PaymentsPaddleMidtransCards, PayPal and wallets everywhere, with sales tax handled for you. In Indonesia, pay in rupiah with QRIS, bank transfer or GoPay.
Sign-inEmailGitHubGooglePasskeysOAuth 2.1OAuth 2.1 lets AI apps connect to your account securely.
Supported runtimes

Drop in your files.
We know what they are.

Detection happens on our side, from the files in your project. No config file required.

index.htmlStatic siteEdge
vite.config.*React, Vue, ViteBuilt, then served from the edge
package.jsonNode, Next.js, ExpressEdge or Tayang server
composer.json + artisanLaravelTayang server · PHP-FPM
wp-config.phpWordPressTayang server · MySQL
index.phpPHP native, CodeIgniterTayang server
go.modGoCompiled on our build servers
Cargo.tomlRustCompiled on our build servers
pom.xml · build.gradleJava, SpringTayang server · Temurin JDK
requirements.txtPython, Django, FastAPITayang server · Gunicorn/Uvicorn
.env · DATABASE_URLNeeds a databaseCreated and connected for you
cPanel backupMigrationSites and databases moved together
Regions + edge

Close to your users.
Wherever they are.

Apps run in Singapore, Frankfurt or Virginia, whichever sits closest to your audience. Static files are cached on a global edge network in 300+ cities.

Deploys right nowexample activity
60sprompt to live URL
<15MBagent RAM at idle
7ways to deploy
Security

Safe by default,
not by settings.

BUILDSandboxed buildsEach build runs in a one-time microVM with no access to our internal network.
SCANSecret scanningAPI keys, tokens and passwords in public files are caught before going live.
AGENTSigned commandsServers accept only commands signed by Tayang. No open shell from outside.
AUDITReadable audit logEvery action on your server is recorded and visible in your dashboard.
NETWORKNo open database portsDatabases are reached through private tunnels only.
ABUSEPhishing screeningEvery deploy is checked against Safe Browsing and phishing patterns.
DATAData residencyPick the region your data lives in. It stays there.
BACKUPDaily backupsEncrypted copies every day, with restores tested regularly.

See the stack in action.

Deploy a project and watch each stage in your build log.

Deploy a site →