Install Pando

Deploy and share any app.

Turn the apps your team builds with AI into tools everyone can use. Share only with the people who need them. Each app gets placed behind access control from the start.

Install PandoView on GitHub

Version 0.18.0 · Open source under AGPL-3.0

A safe place for AI-built apps

People across your company are building their own tools with AI assistants. IT usually has nowhere safe to host them and no time to review each one, so they end up on laptops and personal cloud accounts, putting sensitive data at risk.

Pando gives those apps somewhere to run.

Automated security review

Every build is scanned for vulnerable dependencies, leaked secrets and misconfiguration. Admins can set a minimum score required to deploy.

Guardrails

Host policy decides where apps can come from, what they can reach on the network and whether they can be public.

Isolation

Each app runs on its own private network, and builds run in a separate rootless container with no access to the host’s files.

Sign-in with your provider

Apps sit behind sign-in through Okta, Entra ID, Google or any other OIDC or SAML provider, with SCIM support.

What happens when you deploy

  1. SourceA repository, a folder or an image
  2. DetectWorks out how to build and run it
  3. BuildIn a rootless container
  4. ScanScored 0 to 100
  5. RunAs a bundle on a private network
  6. ShareAt its own address, behind sign-in

How Pando builds your app

package.jsonsrc/
  1. 1Compose fileNot found
  2. 2Published imageNot found
  3. 3DockerfileNot found
  4. 4Static siteNot found
  5. 5Buildpack (Railpack)Uses this
  6. OtherwisePando asks

Sign-in for every app

Every request goes through Pando. It signs people in and checks they’re allowed before your app sees anything, then tells your app who they are, so it doesn’t need its own login.

VisitorDana[email protected] · financeopens inventory.pando.example.com
Pando
  • Signed in with Okta
  • Shared with finance
Let through
Your app
X-Pando-Assertion: eyJhbGciOiJFZERTQSJ9…X-Pando-User: usr_01HQ8…X-Pando-Email: [email protected]X-Pando-Groups: finance
Never sees this requestSigned by Pando, for this app.
Security
83 / 100Meets this installation’s requirement of 70
0 critical, 1 high, 1 medium, 1 low · scanned 3 min ago
FindingSeverityWhat it isFixed in
CVE-2021-23337Highlodash: command injection via template4.17.21
CVE-2023-26136Mediumtough-cookie: prototype pollution4.1.3
DS026LowNo HEALTHCHECK definedNo fix yet

A security score for every app

Pando scans apps for vulnerabilities, leaked secrets and misconfiguration, and scores each one from 0 to 100. Admins can restrict deployments to a minimum score.

NoteThis does not fix bad code, but it helps control what gets deployed.

Isolated apps

Apps run in isolated bundles, which have their own private network. This means they can’t reach other apps, and the only way in is through Pando.

Pando proxychecks sign-in and access on every request
inventoryprivate network
webthrough Pando
postgresprivate
time-offprivate network
webthrough Pando
workerprivate
redisprivate
handbookprivate network
sitethrough Pando

Get started

Pando is open source under AGPL-3.0. The license covers Pando, not the apps you host on it.

Install PandoRead the docs

Everything Pando includes is on the features page. For a commercial license, support or managed hosting, see pricing.