NEW Progressive rollouts, now with auto-halt →

Ship on Friday.

Halogen is the release control plane for engineering teams — progressive rollouts, one-keystroke rollback, and runtime flags on a single surface.

Start for free Book a demo →
Free for teams up to 10 SOC 2 Type II Deploys in every region
N Northwind ▾
Releases / Production
⌘K
RK TM AO +6
All services Last 24 hours Status: any F  filter
DEP-4192 api-gateway · v2.31.0 Rolling out 62% · healthy RK 2m
DEP-4191 payments-core · v8.4.2 Live 100% · 4m 12s TM 14m
DEP-4190 search-index · v1.19.7 Canary 25% · gate 2/4 AO 31m
DEP-4188 web-app · v4.0.1 Rolled back auto-halt · 4.1s JV 1h
DEP-4187 notifications · v3.7.0 Live 100% · 6m 02s SD 3h
DEP-4185 edge-router · v0.44.1 Live 100% · 2m 48s TM 5h
DEP-4184 billing-sync · v2.2.9 Queued behind DEP-4192 RK 6h

Shipping production traffic at

Northwind Auralink Kestrel basalt Peregrine Tidalbank Monoform Vector Co
Progressive delivery

Every deploy is a
controlled experiment.

Define the gates once. Halogen advances the rollout only when the numbers agree, and reverses it the moment they don't.

api-gateway Rolling out Started 2m ago · auto-halt armed
05% passed
Error budget ✓
0.01% · limit 0.10%
p95 latency ✓
118 ms · limit 250 ms
25% passed
Error budget ✓
0.02% · limit 0.10%
Saturation ✓
41% · limit 80%
50% running
Error budget ···
0.02% · 6m of 15m
Manual approval ···
@rk · not required
100% queued
Soak window —
30m after promotion
Notify #eng-releases —
on completion
Built for speed

Your hands never
leave the keyboard.

Every action in Halogen has a shortcut, and every shortcut is one command away. Roll back production without reaching for a mouse.

4.2s median rollback. From keystroke to healthy, measured across every customer.
Offline-first client. The console renders from local state, so it never waits on the network.
Same surface in the terminal. hal rollback api-gateway does exactly what the button does.
Read the CLI docs →
⌘Kroll
SUGGESTED
Roll back api-gateway to v2.30.4 ⇧R
Roll forward to next gate GF
Rollout policy › edit gates E
RECENT
Pause all rollouts in production ⌘.
↑↓ to navigate↵ to runesc to close
Runtime flags

Flags that clean up
after themselves.

Every flag ships with an expiry. Halogen opens the cleanup PR when the date lands, so the codebase never fills with dead branches.

Targeting without a deploy. Cohorts, percentages, and per-account overrides evaluate at the edge in under a millisecond.
Tied to the release. A rollback reverts the flags that shipped with it — no orphaned state.
See how flags work →
Flags production 12 active · 3 expiring
checkout_v3_redesign
42% of accounts · expires in 6 days
ramping
edge_cache_bypass
Internal accounts only · expires in 2 days
internal
async_invoice_export
100% of accounts · cleanup PR open
ready
search_reranker_beta
Paused by auto-halt · 41m ago
halted
billing_proration_fix
5% of accounts · expires in 21 days
canary
4.2s

Median time from rollback keystroke to a healthy production fleet.

99.99%

Control-plane uptime over the last twelve months, measured externally.

12M

Deploys orchestrated across 2,400 engineering teams since 2023.

“We used to schedule releases around who was awake. Now the gates decide, and the on-call engineer finds out because the graph went flat.”
RK

Rebecca Kalu VP Engineering, Northwind

Deploy with
the lights on.

Connect a repository and run your first guarded rollout in under ten minutes. No migration, no rewrite.

Start for free Talk to an engineer →
Setout All styles