Prototype → Production on your own AWS

Ship your LLM app to AWS in under an hour.

Production-shaped from day one. Auto-provision Fargate, RDS, Bedrock, and S3 without touching the AWS Console.

mergezorbit/env-production-config
01resource "aws_fargate_service" "app" {
02name = "zorbit-prod-v1"
03cluster = module.vpc.ecs_cluster_id
04task_definition = module.app_task.arn
05network_configuration {
06subnets = module.vpc.private_subnets
07security_groups = [module.lb.sg_id]
08}
09}

Not a toy deploy. A real AWS stack.

architecture

Production shape

Multi-AZ VPC, private subnets, and encrypted storage. No public IP addresses on your databases, ever.

rebase

Delivered as PR

We don't hide the logic. Zorbit generates clean OpenTofu (Terraform) code and opens a PR in your repo.

cloud_done

Runs in your AWS

Own your infrastructure. If you cancel Zorbit, your stack remains exactly where it is. Zero lock-in.

From repo to running in 60 minutes

1

Connect

Install the Zorbit GitHub App and launch a CloudFormation stack to grant a cross-account IAM role. No access keys stored.

2

Analyze

We scan your repo for language, framework, database, and LLM provider (OpenAI, Anthropic, Bedrock) to shape the stack.

3

Plan

Review the proposed AWS architecture and cost estimate. Zorbit opens a PR in your repo with the generated OpenTofu config.

4

Deploy

Merge the PR. Zorbit runs tofu plan + apply in a sandboxed runner and streams logs. Your app is live on AWS.

The stack, spelled out

No magic black boxes. Standard AWS services, shaped for LLM apps.

hubVPC · ALB
memoryECS Fargate
databaseRDS · pgvector
list_altSQS + DLQ
folder_zipS3 Buckets
keySecrets Mgr
shield_personIAM Roles
monitoringCloudWatch
boltBedrock
paymentsBudget Alarm
[ + ] Multi-AZ VPC, private subnets, encrypted state in S3 with native locking — all in your AWS account

Why not just use [X]?

FeatureVercel / RenderDIY AWSZorbit
Setup time5 mins2–4 weeks< 60 mins
Runs in your AWSNo (their infra)YesYes (cross-account IAM)
Bedrock + pgvector wiredNoYou write itBuilt-in module
Infrastructure as codeNoneYou maintain itOpenTofu PR in your repo
Exit strategyRe-platformYou own itYou own the code

Built for AI-app teams that outgrew PaaS

We're still building — the waitlist is open. No fake testimonials here, just the three moments when Zorbit is obviously the right call.

trending_up

Your PaaS bill just doubled

You're shipping an LLM product on Vercel or Render and the bandwidth + compute line is now bigger than your salary. AWS would slash it — but nobody on the team wants to own the Terraform.

memory_alt

You need Bedrock, pgvector, or a private VPC

Your roadmap has RAG, embeddings, or a customer who asked “is this in your VPC?” PaaS can't help. You need RDS with pgvector, Bedrock IAM, and private subnets — configured correctly the first time.

assignment_turned_in

Your customer asked for your AWS account

An enterprise pilot requires you to run inside your own AWS with data residency and encrypted state. You have six weeks and no DevOps hire. Zorbit ships that stack as a reviewable pull request.

Frequently Asked

How do you handle my AWS credentials?expand_more
You launch a CloudFormation stack in your AWS account that creates a cross-account IAM role scoped to exactly the services Zorbit provisions. We call STS AssumeRole — no permanent access keys are ever stored. You can revoke our access instantly by deleting the role.
What is OpenTofu?expand_more
OpenTofu is the open-source fork of Terraform governed by the Linux Foundation. The config Zorbit generates is standard HCL — it runs with either OpenTofu or Terraform, and it's yours to keep.
Can I use my existing VPC?expand_more
Not at launch. Zorbit provisions a fresh, hardened VPC for your app (multi-AZ, private subnets, NAT). Importing existing infrastructure is on the roadmap after we get the greenfield flow rock-solid.
What about Bedrock, OpenAI, Anthropic?expand_more
Bedrock IAM and VPC endpoints are wired into the default module. For external providers (OpenAI, Anthropic, etc.) Zorbit stores your API key in AWS Secrets Manager and injects it into your Fargate task at runtime. SageMaker and GPU workloads are roadmap.
When does it launch?expand_more
We&apos;re opening a private beta to waitlist signups first — targeting the next few months. You&apos;ll get an email with an invite and onboarding instructions when your slot is ready.
How much will Zorbit cost?expand_more
Free for early-access teams invited off the waitlist. After GA we plan on $49/project/month, flat. We never mark up your AWS bill — you pay AWS directly at standard rates.
Is the code open source?expand_more
The OpenTofu modules generated in your repo are yours to keep and modify under a permissive license. The Zorbit orchestrator itself will be source-available for early-access teams — we&apos;ll make a final licensing call before GA.
rocket_launch

Stop bikeshedding your deploy. Get on the list.

The first 50 teams off the waitlist get free early access and help shape the v1 stack. Drop your email.