Blog
Insights, analysis, and updates from the AI agent economy. Browse by tag · Browse the archive.
The Self-Hosted PaaS Category Gets Crowded in 2026: What Coolify, Dokku, CapRover, and Dokploy Actually Don't Do
Coolify, Dokku, CapRover, and Dokploy now cover the self-hosted PaaS category from every angle. A grounded look at the three things none of them do — and the real cost of the Kubernetes-native alternative that does.
Railway's New MCP Server Has 7 Tools. bex's Shipped One Has 13 — and Still Can't Deploy
Railway's remote MCP server ships 7 tools and a one-line agent install; bex's already-shipped MCP server exposes 13. Here's what each actually lets an agent do unattended, and the one deploy verb bex still owes its own roadmap.
pgBackRest Got Archived, Then Rescued: The Bus-Factor Checklist Every Self-Hosted Postgres Backup Stack Needs
pgBackRest's repo went read-only in April 2026 after its corporate sponsor was sold, then a nine-company coalition revived it three weeks later. Here's the five-question checklist that story exposes, applied to the two real backup paths a CloudNativePG operator can choose today.
Gitpod Bet the Company on Self-Hosted Agent Infra — Then OpenAI Bought It
Gitpod rebranded to Ona and went self-hosted-only in September 2025. Nine months later OpenAI bought it for Codex. Here's what a hyperscaler choosing to buy customer-owned execution instead of building it actually signals.
The NSA Just Published a Threat Model for MCP: What It Means for Your Deploy Agent
The NSA's AI Security Center named four structural risks in MCP's design — and every one already has a real 2026 incident behind it. Here's what each means concretely for a self-hosted MCP server with deploy and rollback authority.
npm v12 Turns Off 16 Years of Automatic Code Execution: The Exact Packages You Need to Re-Approve Before Your Build Breaks
npm v12 flipped install scripts, Git dependencies, and remote tarballs to off by default after a year of worm-driven supply chain attacks — here's the exact audit of which packages need re-approving and what it means for a git-push PaaS's Node buildpack.
Northflank Has Four Kubernetes Modes. Only One Puts You in the Driver's Seat
Northflank markets four ways to run Kubernetes under its platform. Three of them mean Northflank's software still operates the control plane — only one hands that job to you. Here's the breakdown, with real numbers.
New York Froze 50MW+ Data Centers. The Math Shows Self-Hosted PaaS Was Never in That Weight Class
New York's Executive Order 62 freezes new 50MW-plus data centers — but every self-hosted colocation campus in Europe tops out under that line. Here's the megawatt math, and what the freeze means for hosted PaaS vendors riding on hyperscaler capacity.
Three JavaScript Quirks, One CVSS 10.0 RCE: What n8n's Sandbox-Escape Chain Means for Every Agent Tool Wired to Your Cluster
Three individually-harmless gaps in n8n's JavaScript sandbox chained into a CVSS 10.0 RCE that reached every stored credential and, on shared instances, the Kubernetes cluster underneath. Here's the exploit chain and what it means for any tool that hands an agent a general-purpose sandbox.
Subscribe
New posts land in your reader as soon as they publish. Pick a format — all three carry the same posts.
Current feeds keep roughly two days of posts so daily polling does not miss a burst. Older entries stay reachable from the feed's next-page link in readers that follow it, or from the blog archive.
Following one topic instead? Browse tags