Metaport is for web-development teams in agencies, studios, government, and education or wherever multiple web-apps are managed.
Development teams deal with the messy reality of maintaining dozens of projects, multiple tech stacks, and multiple hosting solutions without a reliable way of seeing what's about to break or what's at risk in any of them from a maintenance, security, and C&A perspective.
Metaport is the essential portfolio and inventory management solution your team doesn't yet have. It's well-suited to teams where;
- Multiple client projects, environments, tech stacks, and hosting solutions exist
- Only higher-value projects are connected to AppSec, ASPM, or CSPM tooling
- There's no single place to see all project health
Metaport maps what's actually running across all projects — frameworks, CMSs, OS's, databases, webservers, language runtimes, and SSL certificates — and flags things that are about to turn into problems, such as:
- Dependencies or software products hitting end-of-life (now, and in the future)
- Security vulnerabilities affecting multiple projects at once
- Expiring SSL certificates or environment issues
Metaport's value is highlighted in common agency situations:
- "We just found Laravel is EOL on one site — but how many others are also affected?"
- "Why are we only finding out about this now?"
- "We just upgraded DJango for a customer, but which others need the same treatment?"
- "I just got a call from the customer, they're asking why Ubuntu on prod is EOL!"
Most delivery teams are still piecing this together manually — spreadsheets, Google Docs, CRMs, Jira, and developer's memories with arbitrary check-ins — all of which breaks down as soon as the number of managed applications changes.
Metaport provides teams with a continuously updated view across everything, so they can:
- Surface and identify risk across all projects
- Surface and identify repeated issues across environments and across projects
- Plan upgrade work with confidence instead of just reacting to incidents
Metaport's overarching value is to teams. Almost every adjacent product is designed for Engineering or Security or Ops roles. But when communication is key between these traditional silos, then data and timing are everything. If your Project Managers don't have the same information as their engineers, and the engineers don't see what Ops do, the team is effectively spinning its wheels when it should be actioning the work.
The result is fewer surprises, a reduction in firefighting, and a clearer picture of what maintenance work actually needs to happen across portfolios.
Metaport is technology agnostic which means your PHP, Node, Python, or .Net apps can all use it. See more at: getmetaport.com and checkout the docs at docs.metaport.sh.
Do you work in a delivery team? Take our survey and tell us how you manage maintenance where you work.
- Multitenant: Every team and application belongs to an organisational unit
- Integrations: OWASP DependencyTrack, Dependabot, Jira, KeyCloak
- Technology Agnostic: Metaport works with your PHP, Node, Python, or .Net apps, and works with Github and Gitlab
- Role Based Access: Role-Based Access Control (RBAC) applies distinct roles to your team, so they access only what they should, nothing more
- Single Sign-on: Metaport integrates with KeyCloak to provide comprehensive SSO for your organisation
- Encryption API keys, tokens and other integration secrets are managed by a secrets manager like Vault or KMS
- Proactive Planning: Share lifeycle gantt charts with customers and stakeholders. Import schedules into shared calendars.
- Portfolio Insights: Quickly surface components, dependencies and vulnerabilities across entire application portfolios 1
- Executive Health Report An executive level report with charts which summarises overall org health
- Application Health Report Individual reports summarise recommendations for next steps
- Birds Eye View: At-a-glance views into the current maintenance standing of your team's apps
- Stay Informed: Custom policies and notifications keeps teams on top of application maintenance of an ever-changing portfolio
- Open Source: With Metaport's open source codebase, common interfaces, and great docs, it's easy to build new features
Metaport SaaS is now generally available! Pick the most suitable subscription tier.
See the documentation site at docs.metaport.sh
Metaport CE is open source software! Use our issue tracker and be sure to read our software license, license exceptions and contributing guidelines.
Metaport is licensed under the GNU Affero GPL version 3.
In addition, the copyright holder grants the additional permission described in LICENSE-EXCEPTION, permitting certain proprietary extensions distributed by Dcentrica to be combined with Metaport.
Credit also goes to Catalyst IT for the original investment and development of Mataara (formerly Archimedes) which heavily influenced the development of Metaport.