Yes. Personal and homelab use is free forever, with all core features and no host limit. Paid plans only apply to commercial/business use, and they're priced per managed host.

No. Most hosts connect over plain SSH (private key or password) as long as the SSH user can run docker and docker compose without sudo. An optional lightweight agent is available for hosts where you'd rather not grant SSH Docker access.

Entirely on your infrastructure. ComposeBastion is self-hosted — it stores state in its own Postgres and writes backups to storage you control. SSH keys and registry credentials are encrypted at rest.

It's built for it. ComposeBastion issues typed, allowlisted Docker commands instead of arbitrary shell, checks request origins, rate-limits sensitive routes, and supports RBAC with a full audit log. Put it behind HTTPS and a reverse proxy and it's production-ready. See the security page for details.

Through PayPal. Card and PayPal details are entered on PayPal's own checkout — they never touch our servers, and we don't store any saved payment method. We only keep an order record (plan, host count, amount, status) linked to your account.

On Business and Enterprise plans, your bug reports are triaged ahead of the public backlog, you get a faster direct support channel, and you have real input into the roadmap. Consulting hours and custom SLAs are planned for Enterprise.

We'd love that — early feedback is exactly how ComposeBastion gets better. Get in touch or open an issue on the project, and it goes straight onto the board.