Over-the-air updates for Docker containers

Publish once — every container updates itself. Your software runs where you can’t reach it directly: customer sites, on-prem servers, edge devices. Fleetwide groups them into fleets, ships each release a batch at a time, and rolls back the ones that fail.

Run the Fleetwide supervisor image and enroll your release. Fleetwide bootstraps your app and keeps it updated over the air. Nothing to install on the host, no Docker socket, no redeploy.

Works withAny Docker imageAI agentsMonitoring agentsEdge & IoT devicesKubernetes · Compose · ECS · k3s

Over-the-air updates for containers, in three moves

Whoever runs the host starts one container, the same way they would start yours, and it stays on the release you publish. Nothing to install on the host, nothing to set up in the cluster, nothing to redeploy. Or build Fleetwide into your own image and ship that.

STEP 01

Publish

Point Fleetwide at the image you already have. It pins the exact digest, so what you publish is what ships.

STEP 02

Roll out

Promote it to a channel. Containers pick it up on their next check-in, download only the layers that changed, and swap over in about the time a restart takes.

STEP 03

Watch it land

Version, health and metrics per container. A release that fails its health check is rolled back automatically.

Publishing

One release. Every container you have deployed.

Promote to a channel, roll a few containers at a time, pause outside business hours. One container failing stops the rollout — the rest stay on the last good release.

Read the docs
Releases · metrics-collectorstable → 2.4.1
  • 2.4.1100%stable
  • 2.5.012%beta
  • 2.5.1-rc0%canary
Promote 2.5.0 to stable → 84 containers updatePromote
84
containers
3 min
to full adoption
0
redeploys needed
  1. 1
    You promote a release

    One click, or a window you picked in advance.

  2. 2
    Supervisors pick it up on check-in

    Seconds later, with no pipeline to re-run and nothing to redeploy.

  3. 3
    Only the changed layers move

    Straight from your registry. The rest comes from the container’s own cache.

  4. 4
    The swap waits for health

    A batch at a time, paced per fleet, so a bad build cannot take the estate with it.

  5. 5
    A failed release rolls itself back

    The last good version comes back on its own and the console says what broke.

Fleet management and monitoring

Every container you run: what it runs, how it is doing, and when it may change

Containers enroll themselves with a key and show up in a fleet. A release reaches them a batch at a time, and one Monitoring page shows every container’s health, resources, metrics and logs across all of your fleets.

Grouped the way you ship

A fleet is a customer, a region or an environment; a deployment is one place it runs. Each fleet follows a channel and rolls out on its own.

A batch at a time, rolled back on failure

Paced per fleet. An unhealthy container rolls itself back and halts the rollout; updates wait for the hours you set, in the fleet’s own time zone.

Monitoring

Containers, CPU and memory, the metrics your app declares, and health, across every fleet on one page. Charts per container when you need to look closer.

Live logs

Switch it on for a fleet and stream any container’s output from the console, or a whole deployment at once. Nothing is stored.

What needs attention

Containers that are offline, out of memory, exited, failed, rolled back or need a redeploy, in one list, with the reason and since when.

Credentials per fleet

Docker registries, artifact repositories and Git repositories: via the container’s own identity, via a secret mounted on the container, or stored in Fleetwide with end-to-end encryption.

Fleetwide Proxy

A browser URL for any container, with nothing open on the customer side

The supervisor opens one outbound connection to the proxy, and requests flow back through it. No inbound port, no VPN, no public IP. The URL is live for as long as the container is.

Outbound only

Nothing listens on the host. It works behind NAT, inside a customer VPC and on a device with no fixed address.

Public or sign-in required

Anyone with the URL, or only members of your organization: console sign-in in the browser, an API token for curl.

Your own domain

Point a hostname at the proxy with a CNAME, prove it with a TXT record, and the certificate is issued for you.

Every container, one URL

Requests are spread across the deployment’s containers. The console shows which ones are serving and how many requests each has handled.

Built for

Software that runs in many places at once

AI agents in customer accounts, collectors on every host, devices in the field: the workflow is the same. Publish a release, watch it land.

Read the docs
Ship weekly

AI agents you ship to customers

Prompts, tools and model choices change every week. Publish a release, roll it to a few containers first, and any container that fails its health check or an error-rate gate rolls itself back.

assistant 1.8.0new tools + promptlive on 212
assistant 1.7.3hallucination fixsuperseded
assistant 1.7.2model swaprolled back · 9 containers
No access needed

Software installed on-prem

Your product runs in customer data centers and VPCs you cannot sign in to. Each container pulls releases from your registry, public or private, and updates only inside that customer’s window, in their time zone.

Acme · Frankfurtheld until Sat 02:00
Update window: Sat 02:00–04:00 · Europe/Berlin
Globex · us-easton 2.5.0
Update window: Daily 01:00–03:00 · local time
Initech · on-premon 2.5.0
Update window: Any time

Pulled from your registry with credentials scoped to each fleet.

Patch fast

Monitoring & security agents

Keep collectors and sensors on every host on the current version. Roll a fix out a batch at a time, watch the versions converge, and see exactly which hosts are behind.

22 of 24 on 3.2.12 updating · patched in 41 min
Flaky links welcome

Edge & IoT devices

Gateways, kiosks, Jetsons and Pis running Docker or k3s. Only changed layers download, the current release keeps running while a device is offline, and updates can wait for a quiet hour.

kiosk-lobby
4.1.0 · healthy
gw-plant-2
4.1.0 · healthy
cam-hub-14
offline · resumes 4.1.0
jetson-line-b
4.1.0 · healthy
pi-sensor-31
4.1.0 · healthy
gw-dock-7
4.1.0 · healthy

Only changed layers download. Offline devices keep running and catch up when they return.

No image rebuild

Models, prompts & config

Ship model weights, prompt files and rules as versioned assets from any OCI registry or Git repository, without rebuilding the image. Each one swaps atomically, then restarts the app, signals it or runs a command.

AssetPinnedOn change
models/rankerv7 · ocirestart app
promptsa1b2c3d · gitsignal SIGHUP
config/rulesv42 · ocirun reload.sh
Each swaps atomically into /data/<asset>/current.
Non-root

Locked-down clusters

Where only non-root containers may run, such as OpenShift, the supervisor is built into your image. No second container, no root, no added capabilities, and the console says when a release needs a full redeploy.

fleetwide supervisoradded once
your app · /srv/appupdated over the air
your base imageunchanged

--user 101 --cap-drop ALL · one container, no sidecar

Fast loop

Development & test fleets

Point a fleet at your test machines with logs and proxy switched on. Push a build, stream its logs live, and open the running container in your browser through Fleetwide Proxy, with no ports opened.

checkout-staging.fleetwide.app200 · 42 ms
live logs · switched on for this fleetno ports opened
12:04:07GET /checkout 200 18 ms
12:04:09upstream timeout, retrying
12:04:10recovered in 812 ms
Pricing

Start free. Pay for containers, never for images.

A container is one running copy of your software that Fleetwide keeps up to date. Deployments, fleets, apps, releases and images are unlimited on every plan.

Start here

Dev

Everything you need to start publishing.

$0/ forever
10 containers
  • 7-day metrics retention
  • Unlimited apps, releases and images
  • Analytics and telemetry
  • Public Fleetwide Proxy on fleetwide.app
Start free

Team

For growing fleets and device estates.

Early access*
100 containers
  • 30-day metrics retention
  • Fleetwide Proxy behind your organization’s sign-in
  • Custom domains for Fleetwide Proxy
  • Everything in Dev
Start 30-day free trial

No credit card required · *Pricing to be announced

Enterprise

For regulated and private environments.

Talk to us
Unlimited containers
  • Unlimited metrics retention
  • Self-hosting
  • Fleetwide Bridge: secure private tunnels
  • Everything in Team

Can I try Team before paying?

Yes. Start a 30-day Team trial from the Team plan card or from Billing, with no credit card. When it ends, you go back to Dev unless you choose to keep Team.

How long is telemetry kept?

Metrics and health history are kept for 7 days on Dev, 30 days on Team, and indefinitely on Enterprise.

Are images or bandwidth metered?

No. Publish as many releases as you want. Containers download only what changed between versions.

Do my images pass through Fleetwide?

No. Fleetwide stores a digest and metadata, never your image. Containers pull layers straight from your registry — public, private or one only your containers can reach — with credentials that stay on your side, or stored encrypted and delivered to just the fleet that needs them.

Can I ship a single image that includes the supervisor?

Yes. The supervisor can be built into your image, so there is one image and no second container: it runs your app from the first start, offline too, and updates it over the air once connected. It runs as your image’s own non-root user.

Can I remove a container?

Yes. Removing it from its deployment frees the slot immediately; the container can enroll again later.

Your next version, live everywhere by tonight.

Create an app, publish a release, promote it. That is the whole workflow — and you can watch it land.

Start free
fleetwide

Over-the-air updates and fleet management for Docker containers. The supervisor runs inside the container; nothing on the host.

© 2026 Fleetwide