paved · in private beta
An internal developer platform with your name on it
In brief
Gives engineering teams a self-service platform under the organisation's own name, built on the standard open-source stack. A new team gets a safe, isolated tenant in one step, and a rebrand is configuration, not a rebuild.
Backstage in front, Argo CD and Crossplane behind, on Kubernetes. Every brand-dependent value is read as the app renders, so one container image serves any number of brands and a rebrand is a config change and a pod restart.
What it does
- A tenant is one object: namespace, quota, default-deny networking, RBAC, a scoped Argo project and a Vault path
- Nothing in the repository is a secret, every credential is generated at bootstrap
- Kyverno guardrails with assertions pinning what each policy allows, rejects and exempts
A closer look
Select any screenshot to enlarge it.
The paved.pro landing page
The Paved demo portal, signed in on an invented estate
Scorecards in the Paved demo
The whitepaper behind it
The problem it measures, the method behind it, and what it deliberately does not do.