The platforms
we build and run
JKANTECH is the company behind Miabi, Goma Gateway, Posta and Certio. Each one started as infrastructure we needed ourselves, hardened in production, then released in the open.
Miabi
The open-source, self-hosted PaaS for shipping apps, not infrastructure.
Docker Compose isn't enough. Kubernetes is overkill.
Miabi is the middle. Deploy from a Git repo, a Docker image or a marketplace template onto servers you own — with domains, automatic HTTPS, managed databases, scaling, backups, monitoring and analytics from a single console.
Deploy
- From a Git repo, a Docker image or a template
- Zero-downtime rolling & canary releases
- CI/CD pipelines and GitOps reconciliation
- Multi-node clustering with Docker Swarm
Operate
- Automatic HTTPS with wildcard certificates
- Managed Postgres, MySQL, Redis, libSQL & Mongo
- Scheduled backups to local, MinIO or S3
- Monitoring, logs, shell and live resource usage
Govern
- Workspace isolation with role-based access
- Built-in multi-tenant container registry
- Privacy-first analytics at the gateway
- CLI, Terraform provider and VS Code extension
Marketplace — official and community templates for apps, databases and full stacks, installed in one click with managed dependencies wired for you.
Analytics — privacy-first traffic, performance and error insight collected at the gateway. No third-party script, no cookie banner.
Goma Gateway
Lightweight, high-performance API Gateway & Reverse Proxy
- Declarative YAML-based configuration
- REST, GraphQL, gRPC, TCP/UDP & WebSocket routing
- Auto HTTPS via Let's Encrypt with mTLS support
- JWT, OAuth, LDAP, ForwardAuth & Basic Auth
- SQL injection & XSS protection, bot detection
- HTTP caching (in-memory or Redis)
Posta
Self-hosted email delivery platform
- REST API for transactional, batch & templated emails
- Async processing with Redis/Asynq, automatic retries
- Versioned, multi-language email templates
- Multiple SMTP providers with domain verification
- API keys with expiration & IP allowlisting
- OAuth/SSO (Google, Keycloak, authentik)
Certio
Self-signed PKI and TLS certificate management, in a single binary
- Create, import & manage roots and intermediate CAs
- Full SAN support — DNS, IPv4/v6, email, URI & wildcards
- Managed issuance or bring-your-own-CSR (key never leaves you)
- Manual, bulk & automatic renewal with linked history
- Revocation with RFC 5280 reason codes and CRL publishing
- Export as PEM, PKCS#12, ZIP, Kubernetes Secret or server snippets
Run these in production —
with the team that wrote them
Deployment, hardening, migration or a custom build on top: the engineers who maintain these platforms are the ones you'd be working with.