Sandstorm

Personal Cloud Platform

Take control of your web

Sandstorm is a better
way to run your server.

Usability

Sandstorm is the easiest way there has ever been to run a server. Install apps as easily as on your phone.

Learn more »

Security

Sandstorm protects you from evil (or buggy) apps while making sure security never gets in the way.

Learn more »

Freedom

Don't get locked into walled gardens. Run any app you want -- even upload your own. You call the shots.

Learn more »

Sandstorm is designed from the ground up to be radically easier to use than any other server platform.

Easy to get apps: Installing an app on your server is like installing an app on your phone. Just choose the app you want from the app store and click "install". You never have to use command shells nor edit config files. You don't have to know about databases nor reverse proxies. Everything is done through your web browser, or handled automatically.

Easy to collaborate: Sharing is built into Sandstorm. You can share any app or document with anyone, whether or not they have an account. Sandstorm supports real-time collaboration apps, including document and spreadsheet editors that allow your collaborators to see what you are typing in real time.

Easy to set up: Installing Sandstorm on your own Linux machine today is as easy as running one script, and it automatically keeps itself up to date. We are working on ways to make it even easier, such as building a Sandstorm distro that can be installed on any machine or VM. We also plan to launch a hosting service where we will manage your server for you, for those who would rather have their apps "in the cloud".

Sandstorm is designed by security wonks. Where most developers don't want to think about security, we care deeply about it, and have designed the whole system to protect you.

Protection from malware: On a traditional server, installing an evil app could mean you lose everything. Under Sandstorm, each app runs in its own secure "sandbox" which starts out isolated from the world. It can't interfere with your other apps nor "phone home" to its developer until you give it permission.

Protection from bugs: Let's face it: most developers don't think enough about security, and they end up producing apps that have bugs allowing hackers to get in. Sandstorm automatically protects apps against a wide range of common vulnerabilities, and security-critical functions like login and sharing are handled by the system itself.

Protection from spying: Sandstorm apps cannot phone home, so they cannot collect data about you for advertising purposes nor perform unwanted experiments on you. Moreover, we are developing advanced per-document encryption techniques to thwart even dedicated hackers.

No protection from getting your job done: Security can often be a hassle, getting in the way of your work. Sandstorm is different. When you tell a Sandstorm app to talk to some other app, or to talk to the internet, Sandstorm sees your intent and automatically grants it access. So, you are never interrupted by a prompt asking "Do you want to allow this app to the thing you just told it to do?" And yet, the apps only get the permissions you actually wanted them to have.

By separating app developers from hosts, Sandstorm leaves you in control.

Freedom to Choose: Run any app you want. You are not limited to what's in the app store. Any developer can build a Sandstorm package, and you can upload any package to your server. You can even run Open Source and Indie apps from developers who don't have the funding to run their own servers.

Freedom to Customize: When you are running your own copy of an app on Sandstorm, there's nothing stopping you from customizing it to your needs, because your changes only affect you. Especially with open source apps, if you don't like the way a feature works, or wish you had a feature that's not there, you can fix it. Not a developer? Perhaps a friend can help, or at worst you can pay someone for a day of work. Compare this to big centralized web services, where you are at the mercy of the operator, who will probably ignore your requests.

Freedom to Integrate: Big centralized web providers tend to build walled gardens that lock you in. Their apps tend only to integrate with other apps from the same company. This isn't because they are evil -- usually it's because they are lazy. With Sandstorm, all your apps live under one roof and behind one login system, which makes it much easier for them to talk to each other securely. And if an app allows any other app to integrate with it, then it must allow all apps that speak the same protocol to do so, so developers can't shut each other out.

Try the demo »

Who is this for?

Individuals

Use Sandstorm to run your personal cloud. Run the apps you choose. Support open source developers. Keep all your data in one place. Avoid spying, advertising, unwanted experiments, and disappearing apps.

Learn more »

Developers

Building your app on Sandstorm lets you focus on your product. No need to maintain or pay for servers, carry a pager, nor even design for scalability. Just build your app and put it on the app store.

Learn more »

Enterprises

We are building tools that allow you to run your corporate server cluster much more easily. Treat a group of machines as a single Sandstorm instance. Reduce IT costs while vastly improving security.

Learn more »

Why have a personal server? Lots of reasons:

Lots of Apps: Use a wide variety of web apps on Sandstorm, including things that you can't find elsewhere. We have the usual e-mail, photo sharing, and collaborative document editing, but also niche apps that the big guys will never offer because they can't be monetized. Moreover, Sandstorm is the only easy way to run many great open source apps.

Protect your privacy: Sandstorm apps can only talk to the outside world with your explicit permission. That means they can't secretly spy on you, develop an advertising profile from your data, or perform psych experiments on you without your consent. Plus, apps running on your server do not disappear when the developer stops supporting them.

Don't get locked in: When developers run the servers, they can lock you in to their walled garden, refusing to play nice with competitors they don't like. Sandstorm puts all your apps and data under your roof, where you can mix and match apps as you please. You can even freely move between hosts and take all your apps and data with you.

Install Now » Stay Updated »

What's in it for developers? As it turns out, lots of things:

Focus on your Product: Just build your app and put it in the app store. No need to maintain or pay for servers. No need to carry a pager. No need to design for scalability. Use any tech stack that runs on Linux — Node, Rails, PHP, Java, Python, whatever. It's easy to port existing code to run on Sandstorm.

Security is Built-in: You don't have to implement login. You don't even have to implement sharing — Sandstorm does that for you. You can even export APIs and integrate with other apps without thinking about OAuth. Sandstorm protects you and your users from most common security problems, so you can rest easy.

Behind-the-firewall: Do your corporate customers often ask to run your app on-prem, behind their firewall? Does that sound like a huge pain to support? Sandstorm makes it easy, handling packaging, deployment, and updates.

Start Hacking »

Use Sandstorm to run your enterprise server cluster:

Easy App Deployment: A Sandstorm app only takes a couple clicks to deploy. It's so easy and secure that non-technical employees can actually deploy the apps they need themselves, without wasting valuable IT time. Get SaaS-like ease-of-use while keeping your data on-prem and under your control.

Ridiculously Secure: Sandstorm automatically compartmentalizes apps and users, preventing application bugs from leading to catastrophic security failures. Meanwhile, Sandstorm's innovative security model ensures that these protections never get in the way of people doing their jobs.

Cluster Management: Sandstorm's enterprise tools will allow a cluster of machines to be treated like one big server. Just load the Sandstorm image on each machine and turn them on, and they'll self-organize. Install apps just as easily as with the personal version, as seen in our demo.

Request Early Access »

Like what you see?

Get on the list

We'll keep you updated as things progress.


I'm interested in...
Using Sandstorm
Developing apps

Help fund us

Thanks to you, our Indiegogo campaign was a success! Contributions are now closed.

GigaOM: Sandstorm’s decentralized hosting platform could finally make indie web apps viable »

TechCrunch: Sandstorm Wants Web Users To Gain More Control Over The Apps They Use »

WIRED: Sandstorm Makes It Easy to Control Your Apps in the Cloud »

Linux Weekly News: Sandstorm personal cloud platform »

Opensource.com: What owning your personal cloud means for the open source movement »

Kenton Varda
Author, Cap'n Proto
Author, Protocol Buffers v2
Owner, LAN Party house

Jade Wang
Developer Engagement, Meteor
Founder, Chez JJ

Jason Paryani
Author, pycapnp

David Renshaw
Author, capnproto-rust
Author, capnproto-java

Garply
Aspiring Parkourist
Chief Entropy Officer
Sand Cat Impersonator

Brian Swetland
Android Systems Lead
2004-2012

Andrew Lutomirski
Linux kernel developer

Jasvir Nagra
Web Security Expert
Former Tech Lead, Caja

Mark Seaborn
Linux Sandboxing Expert
Author, Plash
Developer on Native Client

Mark Miller
Distributed Security Expert
Author, E Language, CapTP,
Capability Myths Demolished

Roger Wagner
Business & Development Advisor
Technology Investments
Board Member, CUE

Audrey Tang
唐鳳

Fork me on GitHub
Google+