Push code. Get a preview URL.
Hamn is the platform you ship on. Push over SSH and every PR gets its own container at a live URL — no CI, ingress, or DNS to wire. Or hand a task to a built-in coding agent that ships the same way: a branch, a preview, and a PR you review and merge.
$ git push hamn main
Enumerating objects: 14, done.
Writing objects: 100% (8/8), 2.1 KiB
remote: ✓ build · 23s
remote: ✓ image built · 312 MB
remote: ✓ deploy · namespace checkout-api
remote: → https://checkout-api.hamn.app
To hamn:alice/checkout-api.git
a10811b..5ab5386 main -> mainFrom git push to live URL in one step.
No YAML pipelines. No ingress controllers to learn. No DNS dance.
- Step 1
Push over SSH
Add your SSH key once. Push to your production branch the same way you push to any git host.
- Step 2
Hamn builds and isolates
Each project lands in a runsc sandbox with envelope-encrypted secrets. No CI to wire up.
- Step 3
Live URL, every push
Production gets a stable URL. Every PR gets its own preview at a dedicated subdomain reviewers can click.
Hand off a task. Review what ships.
Assign a task to your coding agent — Claude or Codex. It implements on its own branch and hands you a preview URL and a PR — bounded by your org's budget and policy. You stay the one who merges.
- 1
Assign
Point a task at the agent. No plan-approval gate — it goes straight to work on its own branch.
- 2
Implement
It writes the change inside the same gVisor sandbox as every other workload.
- 3
Preview + PR review
The branch gets a live URL and a PR review of its own changes.
- 4
Revise
Reply with more context in the same work. It re-implements; a fresh review appears.
Approve & merge
When you're happy, you approve and merge the work. The agent never merges itself.
Same compute, same audit log, same preview URLs as every other push.
Everything you need to ship — and nothing you don't.
Hamn is built around a single promise: push code, get a live URL, the platform stays out of your way.
SSH-native
Push like any git host. Hamn ships on every push to your production branch — no CI step in between.
Preview per PR
Open a PR, get its own container at a dedicated subdomain. Reviewers click; they don't git pull.
Public or private
Mark a project public and anyone can browse its code, tasks, and PRs without signing in.
Sandbox isolation
Debian compute nodes run containerd with runsc. One isolated network per project, envelope-encrypted credentials.
Agent work, built in
Assign a task to your coding agent — Claude or Codex. It ships a branch, a preview URL, and a PR you review — revise in the same session, then approve and merge. Bounded by per-org budget and policy.
Hash-chained audit log
Every privileged action lands in a tamper-evident log. Operators verify history end-to-end.
Ready to push your first project?
Sign in, add an SSH key, and create a project. Your first deploy is one git push away.