all posts

The best Northflank alternatives in 2026

Ajay Kumar··8 min read

Northflank covers more ground than most platforms in its category: services, cron jobs, build pipelines, managed Postgres and Redis, preview environments, and a bring-your-own-cloud option that runs the whole thing in your own account. That breadth is why 'what should I use instead' is genuinely hard to answer — the right replacement depends on which slice you're leaving.

Four reasons account for most migrations. I build PandaStack, which is relevant to one of them; I'll say which and stay out of the way for the rest.

The four reasons

1. You want something simpler

The most common reason, and the least discussed. Northflank's model has real concepts in it — projects, services, addons, pipelines — and if you're one person deploying one API, that's more surface than the problem justifies. Teams don't leave because it's bad; they leave because they were using a tenth of it.

Where to look: Railway and Render for the shortest path from repo to running service; Fly.io if you want machines rather than services and don't mind a CLI-first workflow; Vercel or Netlify if what you're actually deploying is a frontend with some API routes attached.

2. The cost shape doesn't match your usage

Compute priced per provisioned instance is excellent when instances are busy and poor when you have a dozen small services that are idle most of the week. The bill reflects what you reserved, not what you used, and a microservice architecture makes that gap wide.

Two directions out. Consolidate — fewer, larger instances running more things — which is unglamorous and frequently the correct answer. Or move to a platform that meters closer to actual consumption: Railway bills usage, Fly.io supports scale-to-zero on machines, Cloud Run bills per request-second, and PandaStack meters apps per second on active CPU and resident memory, with sleeping apps billing nothing while asleep.

3. You need it in your own cloud account

This is the requirement that eliminates most alternatives immediately. If compliance says the workload runs in your VPC, in your account, under your audit logging, then hosted-only platforms are out regardless of how good they are.

Northflank's BYOC is genuinely one of the better implementations of this, so be honest about whether you're replacing it or just re-pricing it. The realistic alternatives are Porter and Qovery, which take a similar 'PaaS on your own Kubernetes' approach, or running the platform layer yourself — Coolify and Dokku at the small end, an internal developer platform on top of Kubernetes at the large end. That last option has an operational cost people routinely underestimate: you are now the platform team.

4. You need to run code you didn't write

This is my category, so read it with that in mind. Container platforms — Northflank included — isolate with namespaces and cgroups on a shared kernel. That's the right trade-off for running your own code. It is a materially different proposition when the code being executed was written by your users, or by a model on their behalf, because a kernel vulnerability is a cross-tenant vulnerability.

If your product's feature list includes running customer code — an AI agent that executes what it generates, a CI service, an interactive tutorial, a data platform where users write transformations — the isolation boundary stops being an implementation detail. MicroVM platforms give each workload its own kernel: Fly Machines, AWS Firecracker directly if you want to operate it yourself, E2B and Daytona for agent sandboxes specifically, and PandaStack, which is the same microVM substrate underneath both its sandboxes and its app hosting.

The reasons compose badly. 'Cheaper, in my own cloud, with microVM isolation, and simpler than what I have' does not describe a product that exists. Rank your four reasons honestly and solve the top one — most failed migrations are teams trying to solve all four at once.

The database is a separate decision

Worth saying loudly, because it's the cheapest useful move available. Managed Postgres bundled into a PaaS is a convenience, and teams outgrow it in predictable ways: they want branching for preview environments, point-in-time recovery further back than the tier allows, or an instance size the ladder doesn't offer.

You can move only the database. Neon for branching, Crunchy Bridge or RDS for a conventional managed instance, Supabase if you want the surrounding toolkit, or PandaStack's managed Postgres if you want clone-and-restore-to-a-point-in-time on a database that suspends when idle and bills storage only while asleep. Repointing a connection string is a far smaller migration than moving every service, and it solves the problem most teams actually have.

Don't forget the jobs

The part that gets missed in migration planning. Northflank runs cron jobs and one-off tasks as first-class objects, and platforms that only run long-lived services push you into keeping a container alive purely to run a scheduler inside it.

Check this before committing. Some alternatives have real scheduled jobs, some have a cron trigger that hits an HTTP endpoint, and some have nothing and expect you to bring your own. The difference matters most for jobs that run for minutes rather than seconds — an HTTP-triggered function with a short execution ceiling is not a replacement for a nightly batch process.

The shortlist

  • Railway — simplest migration if you want the same repo-to-service flow with usage-based billing and less surface area.
  • Render — closest like-for-like on services plus managed Postgres; predictable, unexciting, well documented.
  • Fly.io — machines rather than services, scale-to-zero, good if you want regional placement and a CLI-first workflow.
  • Porter / Qovery — the bring-your-own-cloud shape, if that's the requirement that's actually binding.
  • Coolify / Dokku — self-hosted, cheapest in cash and most expensive in your time.
  • Google Cloud Run — per-request-second billing and scale-to-zero, if your services are stateless HTTP.
  • PandaStack — microVM-per-app isolation, per-second billing, apps and managed Postgres together; the right call specifically when you're running code you didn't write.

How to choose

Write down the one thing that made you start looking. If it's cost, get the actual usage numbers before you shop, because consolidation often beats migration. If it's compliance, that constraint eliminates most of the list and the decision becomes easy. If it's isolation, you need a different kind of platform rather than a cheaper one of the same kind. And if it's complexity, be careful — a simpler platform you outgrow in a year is a second migration you scheduled for yourself.

Frequently asked questions

What is the closest alternative to Northflank?

Render for like-for-like hosted services with managed Postgres, and Porter or Qovery if what you actually need is the bring-your-own-cloud model. Northflank is unusually broad — services, jobs, pipelines, databases, and BYOC in one product — so no single alternative covers all of it, and trying to find one is how migrations stall. Identify which capability is binding for you, replace that well, and accept that you may end up with two vendors where you previously had one. For many teams that turns out to be cheaper and easier to reason about than the single platform was.

Should I move my database when I move my apps?

Usually not at the same time, and often not at all. Repointing a connection string is a small, reversible change you can do independently of where the application runs, whereas moving both simultaneously means any problem afterwards has two possible causes. If the database is the actual reason you are looking — you want branching for preview environments, longer point-in-time recovery, or a size the tier ladder does not offer — move only the database and leave the apps alone. That single change solves the underlying complaint for a large share of teams.

Is a container PaaS safe for running user-submitted code?

It depends on how much you trust the code, and the honest answer for genuinely untrusted input is no. Container platforms isolate workloads with namespaces and cgroups on a kernel shared by every tenant on the host, so a kernel-level vulnerability is a cross-tenant one. That is an appropriate trade-off for running your own code and a poor one when the code was written by your users or generated by a model on their behalf. For those workloads use a platform that gives each workload its own kernel, which in practice means a microVM: Firecracker-based platforms exist precisely because container isolation was insufficient for exactly this problem.

Is self-hosting a PaaS cheaper than Northflank?

In cash, almost always. In total cost, it depends on what your time is worth and how much of it you have. Coolify or Dokku on a rented server replaces the platform fee with a much smaller server bill, and hands you the upgrades, the backups, the TLS renewals, the disk that fills up at an inconvenient moment, and the pager. That is a good trade for a side project or a team with genuine platform capacity and slack, and a bad one for a small product team whose scarcest resource is attention. Price the on-call rotation, not just the instance.

How do I compare hosting costs fairly between platforms?

Compare against your measured usage, not your provisioned capacity, because the two diverge most for exactly the workloads people want to move. Pull a month of real CPU and memory consumption per service, then price that same profile under each candidate's model — per-instance-month, per-request-second, or per-second on actual usage. Include the things that hide outside the compute line: egress, build minutes, database storage and backups, and the cost of preview environments if you run one per pull request. Teams are routinely surprised to find that idle time, not peak traffic, dominates their bill.

Keep reading

Run code in a microVM in one API call.

49ms p50 cold start. Fork, snapshot, and scale to zero.

Start free
Written by Ajay Kumar, Founder, PandaStack.