Enterprise

Gluecron for Enterprise

AI-native git hosting with the security and compliance your team requires. Custom pricing, OIDC SSO + SCIM, audit log SIEM export, and dedicated support — plus straight answers on SOC 2 and data residency, on the same platform your developers already love.

What you get

Everything in Team, plus enterprise-grade controls.

Single Sign-On

OIDC single sign-on and SCIM 2.0 user provisioning are built in today: connect Okta, Azure AD, Google Workspace or Auth0, enforce SSO for your organisation, and let your IdP create and deactivate accounts. SAML is present in code but is not yet hardened to an enterprise standard, so we do not sell it — ask if you need it and we will be straight about where it stands.

Audit Log & SIEM Export

Every sensitive action — push, merge, token creation, branch protection change — is captured in the audit log. Stream to Splunk, Datadog, or any SIEM via GET /api/v2/audit.

Data Residency

Honest today: Gluecron runs in a single US region. Regional choice (EU / US) is planned for general availability; if residency is a hard requirement, self-hosting on your own infrastructure is supported now.

SOC 2 Type II

Not yet audited. A SOC 2 Type II programme is planned alongside general availability (late 2026 – 2027). Until then we share our security controls, architecture and incident history on request — no report exists yet, and we will not imply one does.

SLA & support

Contractual uptime and response-time SLAs arrive with GA. During the preview the service is best-effort: every incident, deploy and health check is published live on /status, and the founder is reachable directly. We will sign a DPA on request.

Custom Pricing

Published pricing lands with GA. For design partners now: AI runs on our keys with a hard budget cap (bring-your-own-key on Cloud is planned, or self-host with your own key today), and tell us what your procurement process needs — we would rather fit it than wall you off.

Audit log API

Pipe every event into your SIEM.

The GET /api/v2/audit endpoint returns a paginated JSON stream of every platform event — repo creates, force pushes, token revocations, merge-gate overrides, and more. Filter by actor, action prefix, or resource type, and page through millions of rows using cursor-based pagination.

  • ISO 8601 timestamps on every event
  • Actor username, IP address, and full metadata payload
  • Cursor pagination — no duplicate events across batches
  • Compatible with Splunk HEC, Datadog Logs, AWS S3 event sink
curl example
GET /api/v2/audit?since=2026-01-01T00:00:00Z&limit=500
Authorization: Bearer glc_<token>

{
  "events": [
    {
      "id": "018e4a...",
      "action": "repo.force_push",
      "actor_id": "abc123",
      "actor_username": "alice",
      "resource_type": "repository",
      "resource_id": "repo-789",
      "metadata": { "ref": "refs/heads/main", "old_sha": "..." },
      "created_at": "2026-06-01T14:23:05.000Z",
      "ip_address": "203.0.113.42"
    }
  ],
  "nextCursor": "018e4b...",
  "hasMore": true
}
Preview
SLA-backed plans at GA
Live
public status & incidents
1 region
US today · EU planned
SOC 2
planned, not yet audited
Get in touch

Talk to the team.

Tell us about your team and what you need. We will reply within one business day with a custom proposal.