Pritunl Cloud
Declarative KVM Virtualization
KVM based alternative to Kubernetes with shell and python based live updating declarative deployments

Supported Single Sign-On Providers
Declarative Virtualization with Dynamic Shell and Python Specs
Define resources with dynamic templates that adjust to configuration changes in the cluster. Provides the benefits of Kubernetes with a less complex architecture and fewer interdependent components.

Transparent Python Integration
Utilize both shell and Python in pod templates with a transparent shared environment.

Instance Base Images
Includes base images for common Linux distributions and FreeBSD.

Multi-Tenant Support
Isolate resources into organizations and control user access to each organization.

VPC Networking
Advanced VPC networking with routing table support. Source and destination checking option for instances allows site-to-site VPN configurations.

Access Policies
Policy controls with WebAuthn, location, source network and browser options.

Domain Management
Integrated domain management with API support for AWS, Cloudflare and Oracle Cloud. Configure A, AAAA and CNAME records manually or automated with pods.

Advanced Firewall
Detailed network ingress control with firewall rules that can be defined through role matched rules or in pod templates.

Static IP Management
Static IP management that can manage pools of public IPv4 and IPv6 addresses that are either host specific or shared between multiple hosts. Support for DHCPv4, DHCPv6 and SLAAC is also available.

S3 Storage Integration
Integrated support for S3 API based storage providers. Pod template images, disk snapshots and backups are stored on the S3 storage.

SSH Key Management
Easily manage multiple SSH keys or SSH certificates to control access to instances.

Secrets Storage
Store secrets in JSON format and provide access through the IMDS service and pod templates.

Load Balancer
Built in load balancer to provide access from the host to web servers running on instances.
Private Bare Metal Virtualization
Self host your own cloud on bare metal or onsite hardware. Pritunl Cloud is platform independent and can be run on any compatible server or platform.
A New Template Format
A new Markdown and YAML based template format that allows adding notes and documentation right into the deployment spec. Python and Shell support allows creating dynamic deployments that can handle complex configurations all in one template.


Live Deployment Logs
Live view of deployment status with logging and resource metrics. All deployment management and monitoring can be done from the web console. The statement based plan system allows taking actions such as scaling deployments or restarting deployments based on the state of existing deployments.
Deployment Migration
Live migrate deployment templates with a diff view of changes that will be applied. Deployments can be migrated from older or newer template commits.


Automatic SSL Certificates
Automatically create SSL certificates from Lets Encrypt with support for HTTP validation on port 80 or DNS CNAME validation using AWS, Cloudflare or Oracle Cloud support DNS APIs. These certificates can then be retrieved and dynamically updated in deployment templates with the IMDS service. Wildcard certificates are supported when using DNS CNAME validation. Certificates will automatically renew allowing effortless management of certificates.
Visual Deployment Management with an Integrated Editor
Visually manage large pod deployments with an integrated editor and comprehensive web console.

Enterprise Virtualization Platform
Complete virtualization platform with no interdependent components. State based design allows Pritunl Cloud host process to exit at anytime and resume without losing configuration consistency.
Upgrades can be done with zero downtime.



Open Source Virtualization
Scalable bare metal virtualization with no vendor lock-in.

Multi-Factor Authentication
Multifactor secondary authentication from Duo, OneLogin Protect, Okta Verify and any WebAuthn hardware token including YubiKeys and Google Titan Tokens.

Open Source Code Base
All source code for Pritunl Cloud is available on GitHub, allowing for transparency and customization. Information for installing Pritunl Cloud from source is available on the repository.

High Availability
All nodes run independently and will continue running in the event of other nodes failing. Additional nodes can be added and removed as needed for fast scaling without downtime.

Instance IMDS Service
Powerful instance IMDS service to provide deployment information and access platform resources. The IMDS agent also provides live metrics on the system CPU, memory and disk usage. On RHEL based distributions security update alerts will be shown in the web console when an instance has pending DNF security updates.
Pricing Plan
Pritunl Cloud is free to use with no limits on the number of servers or users. An optional subscription provides enterprise features including multi-tenant support, single sign-on and geo-IP data. The subscription can be activated from the admin web console at anytime.
Single Sign-On Authentication
Single sign-on authentication with Auth0, Azure Entra, Google Workspace, OneLogin, Okta and JumpCloud.
Multi-Tenant Support
Create multiple organizations and isolate resources for different teams.
Unlimited Users and Servers
No additional costs for additional servers or users.