Calm platformsfor restless teams
Gumoji builds and runs the layer under your software: code hosting, identity, gateways, scanning and compliance. So your engineers can ship and your auditors can sleep.
01 — Products
Five products. One platform layer underneath.
Open-source cores, operated by us, hosted in the EU. Use one on its own, or let them talk to each other.
- 01ForgeGitea, scaledCode hosting and CI that grows with you. Repositories, reviews, packages and pipelines on one forge you could run yourself, and don't have to.
- 02AuthKeycloak, managedSSO, MFA and user federation for your apps and your people, patched and upgraded by the folks who do it for a living.
- 03GatewayAPI gatewayOne front door for every API. Routing, keys, rate limits and an audit trail, configured as code next to the services it protects.
- 04ScanSecurity scanningDependency, container and secret scanning wired into every pipeline, with findings ranked by what is actually reachable.
- 05ComplyNIS2 · ISO 27001A compliance portal that maps your controls to evidence your platform already produces. Less binder, more proof.
02 — Services
And when products aren't enough, we roll up our sleeves.
Platform engineering
Internal developer platforms, CI/CD that people trust, and calm migrations off GitHub, GitLab or that one Jenkins box under a desk.
Security & compliance
NIS2 readiness, ISO 27001, identity and scanning, done by engineers who also have to live with the controls afterwards.
Run & operate
We host and operate the stack, around the clock, and write down every incident in plain language. You get the pager-free version.
03 — How we think
“We make the platform boring, so the product can be anything but.
Working principle no. 1 — pinned above every desk
Products, all built on open-source cores you could take with you.
Uptime we commit to on Run plans, in writing, per product.
Where your code, identities and logs live. No exceptions clause.
The longest you'll wait for a human reply. Usually it's an hour.