Spec Marketplace Progress Security GitHub X LinkedIn Bluesky
Pre-launch · Building in the open

The engine should be invisible.

The extensions should be infinite.

LabHit is a CI/CD kernel — a minimal Rust core that schedules pipelines. Everything else is a sandboxed extension you install, swap, or build yourself.

Rust Core WASM Extensions Secure by Default Apache 2.0
Try the demo → Browse extensions

Define stages, not workflows

Each stage declares what to run — an extension or a shell command. Wire dependencies with after. The scheduler builds a DAG and runs independent stages in parallel.

pipeline.yaml
engine: "1"

pipeline:
  name: build-and-deploy

stages:
  fetch:
    use: source/git
    with:
      depth: 1

  test:
    after: [fetch]
    run: cargo test --workspace
    sandbox:
      image: rust:1.93-slim

  build:
    after: [test]
    use: build/container
    with:
      dockerfile: Dockerfile

  scan:
    after: [test]
    use: scan/trivy

  deploy:
    after: [build, scan]
    use: deploy/kubernetes
    gate:
      approval: required
Scheduler DAG
fetch
test
build
scan
⚖ deploy

From smart contracts to model training. One pipeline.

The engine ships with zero built-in integrations. Every capability is an extension you install by name: source/git for checkout, build/container for Docker builds, deploy/ethereum for smart contracts.

Ship Solidity to mainnet. Train PyTorch models. Run security audits. 77 extensions planned across DevOps, blockchain, machine learning, and security — all sandboxed, all composable.

Browse the extension interface →
source/git
Source
build/container
Build
build/solidity
Blockchain
🧠
train/pytorch
Machine Learning
🔍
scan/trivy
Scan
deploy/ethereum
Blockchain
deploy/kubernetes
Deploy
🔐
scan/sast
Security

The app store for CI/CD.

Browse, install, and publish extensions across 15 categories. Build in any language that compiles to WASM.

Blockchain

Solidity builds, Foundry tests, Ethereum & Solana deploys, gas audits, Etherscan verification.

🧠

Machine Learning

PyTorch training, ONNX builds, model validation gates, GPU containers, inference deployment.

🛡

Security

SAST, DAST, dependency scanning, secret detection, license gates, CIS benchmarks.

Build extensions. Sell them. Keep 85%.

77 extensions planned across 15 categories. Publish for free or sell with Dev Pro.

Browse extensions → Publish yours

One binary. Three modes.

Same config. Same extensions. Same results. Scale when you need to.

01

Local

SQLite · Embedded

Run on your laptop. Zero infrastructure. Start with labhit run and watch your pipeline execute.

02

Standalone

PostgreSQL · Single Node

Deploy to a server. Same binary, same config. Add a database for persistence and your team is running.

03

Cluster

PostgreSQL · Distributed

Scale horizontally. High availability, distributed scheduling, same extensions. The config never changes.

The config never changes. Only the infrastructure beneath it does.

Where we are

Built in the open. Shipped when ready. Follow our engineering milestones.

23
Shipped
4
Building
5
Planned
Pipeline specification publishedDone
Pipeline schema & validationDone
DAG pipeline schedulerDone
Pipeline execution engineDone
Event bus integrationDone
CLI interface designedDone
GraphQL API serverDone
Persistent storage layerDone
Variable interpolationDone
Production API deploymentDone
Real-time log streamingDone
User authentication & accountsDone
Distributed schedulingNext
Pipeline cachingNext
Extension interface published (WIT)Done
Extension naming conventionDone
WASM plugin loadingDone
Extension signing & verificationBuilding
Extension developer guideDone
Extension marketplaceDone
WASM sandbox modelDone
Security disclosure policyDone
Policy engineDone
Security test suiteDone
Secret managementBuilding
Audit loggingNext
Container execution backendDone
Pipeline trigger UIDone
Developer documentationBuilding
Extension development kitBuilding
Pipeline YAML referenceNext
Example pipeline libraryNext

The spec is open.
The engine is running.

Read the specification, explore the extension interface, or try the free developer preview.

One email when we launch. No spam, no newsletter.