Features · 6 capabilities
Simple Container features — parent stacks, multi-cloud templates, encrypted secrets that survive AI agents, supply-chain receipts, AI-assisted onboarding, and Forge as the flagship dogfood.
SC turns “deploy this service” into a one-file declaration that works the same way on every cloud you support. Six pillars carry the product:
server.yaml; child services in client.yaml. Three deployment types: cloud-compose, single-image, static.sc secrets keeps secrets ciphertext-at-rest in git using your SSH key (RSA or Ed25519). AI agents reading your repo see encrypted blobs, never values. The post-AI threat model.sc image scan, sc image sign, sc sbom generate, sc provenance generate, sc release. Cosign + CycloneDX + SLSA Build L3 attestations, all from one CLI.sc assistant — AI-powered onboarding (sc assistant dev setup, sc assistant devops setup) + an MCP server so other agents can drive SC programmatically. How Forge talks to its own infra.Declarative server + client stacks. server.yaml describes shared infrastructure; client.yaml describes a service that uses it. Three deployment types: cloud-compose, single-image, static.
Learn more → Multi-cloudSame service definition deploys to AWS Lambda, ECS Fargate, GCP Cloud Run, GKE Autopilot, or self-hosted Kubernetes. Switch templates; the service stays the same.
Learn more → AI-era secrets`sc secrets` encrypts your secrets with your SSH key (RSA or Ed25519) and commits ciphertext to git. Authorized teammates decrypt with their private key. AI agents reading repo files see ciphertext, never values.
Learn more → Supply-chain`sc image scan`, `sc image sign`, `sc sbom generate`, `sc provenance generate`, and `sc release` ship the artifact-security primitives every regulated buyer asks for, built into the deploy pipeline.
Learn more → AI assistant`sc assistant dev setup` scaffolds your service config (Dockerfile, docker-compose.yaml, client.yaml). `sc assistant devops setup` walks through provisioning the parent stack. Plus an MCP server so other tools can drive SC programmatically.
Learn more → ⭐ FlagshipForge is a workflow engine for AI agent teams, deployed entirely on Simple Container. We built it to prove the SC architecture at scale. You can dogfood the same patterns.
Learn more →Try the SC parent stack in your own repo, or see what we built on top of it — Forge, our flagship AI workflow engine for teams.