Altostratus

Quick start

Get from account creation to your first deployed instance in under fifteen minutes.

1. Create an account Go to altostratus.app and sign up with a handle and recovery key. No email required. Store your recovery key somewhere secure — it is the only way to recover account access.
2. Activate your subscription Choose a plan and pay via Rudis. You'll receive a Lightning, BTC, or Monero invoice. Payment confirms instantly on Lightning; on-chain BTC and Monero confirm within one block. No card, no billing identity.
3. Connect a cloud platform Navigate to Platforms → Add Platform. Select your provider (FlokiNET, Hetzner, Exoscale, etc.) and enter your API credentials. Credentials are stored AES-256-GCM encrypted and never transmitted in plaintext.
4. Provision your first instance Go to Instances → New Instance. Select your connected platform, choose a region, configure your instance type, and deploy. Multi-region deployments follow the same flow across multiple platforms simultaneously.
5. Monitor and manage The dashboard shows real-time status across all connected platforms. Start, stop, and destroy instances from one interface. Metrics and scan data are retained per your plan tier (30, 90, or 365 days).

Altostratus

Account & identity

Altostratus accounts are pseudonymous by design. There is no email address, no phone number, and no government identity linked to your account at any point.

Handle

Your handle is your account identifier. It is not publicly visible and is used only for login. Choose anything — it does not need to correspond to a real identity.

Recovery key

Your recovery key is generated at signup. It is the only credential that can restore account access if you lose your handle or password. Store it offline. We cannot recover it for you — it is never transmitted to or stored on our servers.

Altostratus

Connecting platforms

Altostratus connects to cloud providers via their native APIs. You supply API credentials; Altostratus manages the control plane.

Supported providers

FlokiNET, Hetzner Cloud, Exoscale, Njalla, coin.host, Hivenet, Scaleway, Azure, GCP, and Fly.io. Privacy-first providers (FlokiNET, Hetzner, Exoscale, Njalla, coin.host) are recommended as the primary deployment targets for operators with sovereignty requirements.

Credential storage

All API credentials are encrypted with AES-256-GCM before being stored. The encryption key is derived from your account credentials and never leaves your deployment. Altostratus cannot read your provider credentials.

Platform limits by tier

Operator: 3 platforms. Team: 10 platforms. Infrastructure: unlimited. You can connect any combination of supported providers up to your tier limit.

Altostratus

Managing instances

Instances are the compute resources provisioned through Altostratus across your connected platforms.

Provisioning

New Instance → select platform → select region → configure type and size → deploy. For multi-region deployments, repeat the region selection across multiple platforms in a single workflow.

Infrastructure Builder

The visual canvas lets you map your full topology — providers, instances, connections, and regions. Use it to document architecture decisions and visualize cross-provider deployments.

AI Assist

AI Assist is powered by your own Anthropic API key (BYOK). Your key is stored encrypted alongside your platform credentials and never transmitted to Arctic Bison. Operator tier has chat and Q&A. Team and above adds plan generation and automated execution.

Instance limits by tier

Operator: 10 instances. Team: 50 instances. Infrastructure: unlimited.

Altostratus

Billing via Rudis

All Altostratus subscriptions are processed through Rudis, our open-source crypto invoice processor. There is no card processor, no billing identity, and no payment record linking your subscription to your infrastructure account.

Payment rails

Lightning Network (instant confirmation), Bitcoin on-chain (one block confirmation), and Monero (two block confirmation). Choose the rail that fits your operational requirements.

Renewal

Subscriptions are monthly or annual. You will receive a Rudis invoice before your renewal date. Pay the invoice to continue service. There is no automatic charge — payment is always explicit and operator-initiated.

Altostratus

Privacy architecture

The following is an architectural statement, not a privacy policy. These properties are enforced by design, not by promise.

Rudis

Overview

Rudis is an open-source, self-hosted crypto invoice processor. It generates payment invoices for Bitcoin (Lightning and on-chain) and Monero, tracks payment status in real time, and delivers webhook notifications when payments confirm.

Rudis is the payment infrastructure that Altostratus itself runs on. If you have paid for an Altostratus subscription, you have already used Rudis.

Rudis is MIT licensed. The full source is on GitHub. You can deploy it independently of Altostratus for any application that needs crypto payment rails.

Rudis

Quick start

Docker Compose deploy from zero to running in under ten minutes.

1. Clone the repository Full instructions and the self-hosting guide are in the repository README.
2. Configure environment variables Copy .env.example to .env and set your node credentials (phoenixd for Lightning, Bitcoin node, Monero daemon), webhook secret, and API key.
3. Start with Docker Compose

   docker compose up -d
4. Create your first invoice via API

   # POST /api/invoices curl -X POST https://your-rudis-instance/api/invoices \ -H "X-API-Key: your-api-key" \ -H "Content-Type: application/json" \ -d '{"amount_usd": 49, "currency": "lightning", "description": "Operator plan"}'
5. Handle the webhook Rudis sends an HMAC-signed POST to your webhook URL when payment confirms. Verify the signature, activate the subscription, done.

Full self-hosting guide, manual deploy instructions, and troubleshooting are in the repository.

Rudis

API reference

Rudis exposes a REST API authenticated with an API key. The full reference is in the repository.

Key endpoints