[ Technical ]

How it's built, and how you control it

For architects and admins: the parts and how they connect, the rules you set, and how it fits your tools.

[ Architecture ]

How the parts connect

What each part does, and which way the connections go.

YouIn the browser

HelioOpsThe AI you talk to. Investigates, explains and suggests fixes. Holds no keys; it can only ask

HelioGateThe control centre's single private entrance

HelioCoreThe control centre. Decides whether a step may run under your rules, signs it, and records it HelioBaseDatabase, plus a separate tamper-evident ledger

Your network HelioSatelliteA small broker beside each group of servers. Collects signed steps and acts through Azure ↓ through Azure Run Command Your serversWindows and Linux. Nothing installed

HelioForgeThe isolated test area, where fixes are proved. No line joins it to your servers

Every arrow into the control centre goes through HelioGate. The broker reaches out to collect signed steps; nothing connects in to your network.

[ Your rules ]

You decide who and what

Your tags select the servers. Your Entra groups name the people. HelioStack follows both.

Your tags and groups

You select servers by the tags you already use; there is no built-in tagging standard. Access policies name your existing Microsoft Entra groups, so there's no separate list of people to keep up to date.

            Environment: Production
            Service: Billing
            Tier: 0
            …whatever you use
          

A no always wins

If one policy allows something and another denies it, it is denied.

Try before you save

A preview shows which servers a change tightens or loosens. A simulator shows what any group would get on any server, and why.

Keep it off your crown jewels

Identity and security servers stay out of reach because you say so. No copies are made of them for testing.

[ Your tools ]

It fits in

API first
Every capability is a documented operation

Nothing is screen-only. Other AI agents and automation can use HelioStack on a person's behalf, never with more rights than that person.
Terraform
Infrastructure as code

HelioStack's settings and policies can be managed with Terraform.

NextFAQ →