Open source internal developer portal for AWS teams.
Track services, deployments, and infrastructure costs in 2 minutes. Backstage alternative built specifically for AWS.
🚀 2-minute setup - npm install && docker-compose up. No YAML hell.
💰 Real-time AWS costs - Tracks actual spend via Cost Explorer API. Backstage doesn't do this.
⚡ Fast & beautiful - Vercel-quality UI, not enterprise gray boxes.
🔍 Command palette (⌘K) - Spotlight-style search across everything.
📊 Production monitoring - Prometheus + Grafana stack included.
🎯 AWS-native - Built for teams already on AWS. No Kubernetes required.
🔐 Multi-tenant - Complete authentication with organization workspaces.
Perfect for: Startups scaling from 5 to 50 engineers managing microservices on AWS.
- Service catalog - Track all microservices with GitHub links, owners, templates
- Deployment history - Every deploy across dev/staging/prod with status tracking
- Team management - Service ownership, Slack integration, member lists
- Multi-tenancy - Multiple organizations with complete data isolation
- Authentication - JWT-based auth with login, register, password reset
- Real-time sync from AWS Cost Explorer API
- Manual refresh - Click "Sync AWS" button to update instantly
- Free tier compatible - Accurately shows $0 when using free tier
- Cost breakdown - By service (EC2, RDS, S3, Lambda, etc.)
- Graceful fallback - Works offline with cached data
- Per-organization - Encrypted AWS credentials for each workspace
- AI-powered savings detection - Identify idle EC2 instances, oversized databases, unused resources
- CloudWatch integration - Analyzes 7-day CPU utilization patterns via AWS API
- Actionable insights - HIGH/MEDIUM/LOW severity scoring with potential monthly savings
- One-click resolution - Mark recommendations as resolved or dismissed
- Real-time analysis - Scan your AWS account on-demand
- Proven results - Helping teams save 15-30% on infrastructure costs
- Industry-standard DevOps metrics - Track the 4 key DORA metrics used by elite engineering teams
- Deployment Frequency - Measure deployment velocity per service, team, and environment
- Lead Time for Changes - Track time between consecutive deployments
- Change Failure Rate - Monitor deployment success rates and quality
- Mean Time to Recovery (MTTR) - Measure incident response effectiveness
- Benchmark comparison - Elite/High/Medium/Low performance classification
- Service breakdown - Compare performance across teams and services
- Trend analysis - Track improvements over time with visual indicators
- Smart filters - By service, team, environment, time range (7d/30d/90d)
Based on Google Cloud's DevOps Research and Assessment (DORA) research.
- Complete authentication system - Email/password login, registration, password reset
- Multiple organizations - Users can belong to multiple workspaces
- Organization switching - Instant context switching in UI
- Team collaboration - Invite members, assign roles, manage permissions
- Role-based access control - Owner, Admin, Member, Viewer roles
- Encrypted credentials - AES-256 encryption for AWS credentials per organization
- Data isolation - PostgreSQL Row-Level Security ensures complete separation
- Organization settings - Manage name, members, AWS integration, and more
- Prometheus + Grafana - Industry-standard monitoring stack
- 4 pre-built dashboards - API Performance, Infrastructure Costs, Service Health, System Resources
- Real-time metrics - HTTP requests, errors, response times
- Business KPIs - Services, deployments, infrastructure costs
- Auto-refresh dashboard - Updates every 30 seconds
- Alert rules - Automated notifications for critical issues
- Alert history - Track, acknowledge, and resolve Prometheus alerts
- Horizontal navigation - Clean, Vercel-inspired design
- Command palette - Press ⌘K to search everything
- Organization switcher - Quick switching between workspaces
- User menu - Profile settings, organization settings, sign out
- Empty states - Helpful guidance when starting fresh
- Mobile responsive - Works on desktop, tablet, phone
- Dark mode - Beautiful dark theme throughout
- Loading states - Skeleton screens, toast notifications
- Node.js 20+
- Docker
- AWS account (optional, for cost tracking)
# Clone and install
git clone https://github.com/GoddeyUwamari/devcontrol.git
cd devcontrol
npm install
# Start PostgreSQL
docker run -d --name platform-postgres \
-e POSTGRES_PASSWORD=postgres \
-e POSTGRES_DB=platform_portal \
-p 5432:5432 postgres:14
# Run database migrations
psql -h localhost -U postgres -d platform_portal -f database/migrations/001_initial_schema.sql
psql -h localhost -U postgres -d platform_portal -f database/migrations/002_create_cost_recommendations.sql
psql -h localhost -U postgres -d platform_portal -f database/migrations/003_create_alert_history.sql
psql -h localhost -U postgres -d platform_portal -f database/migrations/004_add_multi_tenancy.sql
psql -h localhost -U postgres -d platform_portal -f database/migrations/005_migrate_existing_data.sql
# Start monitoring stack
cd monitoring && docker-compose -f docker-compose.monitoring.yml up -d && cd ..
# Configure environment
cp backend/.env.example backend/.env
# Add required secrets:
# - JWT_SECRET (generate: openssl rand -hex 32)
# - ENCRYPTION_KEY (generate: openssl rand -hex 32)
# - AWS credentials (optional)
# Start everything
npm run devAccess:
- Frontend: http://localhost:3010
- API: http://localhost:8080
- Prometheus: http://localhost:9090
- Grafana: http://localhost:3000 (admin/devcontrol2024)
Default admin account (CHANGE PASSWORD!):
- Email: admin@devcontrol.local
- Password: ChangeMe123!
-
Register your account at http://localhost:3010/register
- Auto-creates your personal organization
- Logs you in automatically
-
Configure AWS (optional):
- Settings → Organization → AWS tab
- Add Access Key ID and Secret Key
- Credentials are encrypted with AES-256
-
Invite team members:
- Settings → Organization → Members tab
- Send email invitations with roles
# 1. Enable Cost Explorer in AWS Console (takes 24hrs)
# 2. Create IAM user with CostExplorerReadOnlyAccess + CloudWatchReadOnlyAccess
# 3. Add credentials in Organization Settings → AWS tab
# 4. Click "Test Connection" to verify
# 5. Click "Sync AWS" in Infrastructure pageSee AWS Integration Guide for detailed setup.
Frontend: Next.js 15 • React 19 • TypeScript • Tailwind v4 • Radix UI
Backend: Express.js • PostgreSQL with RLS • Node.js 20+ • Zod validation • JWT Auth
Security: AES-256 encryption • bcrypt • Row-Level Security • RBAC
Monitoring: Prometheus • Grafana • Node Exporter • prom-client
Cloud: AWS SDK (Cost Explorer, CloudWatch) • Docker
See Architecture Guide for system design details.
Register:
curl -X POST http://localhost:8080/api/auth/register \
-H "Content-Type: application/json" \
-d '{
"email": "user@example.com",
"password": "SecurePass123!",
"fullName": "John Doe"
}'Login:
curl -X POST http://localhost:8080/api/auth/login \
-H "Content-Type: application/json" \
-d '{
"email": "user@example.com",
"password": "SecurePass123!"
}'curl -X POST http://localhost:8080/api/infrastructure/sync-aws \
-H "Authorization: Bearer YOUR_JWT_TOKEN"Response:
{
"success": true,
"data": {
"totalCost": 0.00,
"resourcesSynced": 1,
"lastSyncedAt": "2025-12-28T18:33:34.008Z",
"byService": [...]
}
}curl http://localhost:8080/api/cost-recommendations \
-H "Authorization: Bearer YOUR_JWT_TOKEN"curl "http://localhost:8080/api/metrics/dora?date_range=30d&environment=production" \
-H "Authorization: Bearer YOUR_JWT_TOKEN"# List organizations
curl http://localhost:8080/api/organizations \
-H "Authorization: Bearer YOUR_JWT_TOKEN"
# Create organization
curl -X POST http://localhost:8080/api/organizations \
-H "Authorization: Bearer YOUR_JWT_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"name": "My Company",
"slug": "my-company"
}'
# Switch organization
curl -X POST http://localhost:8080/api/organizations/switch \
-H "Authorization: Bearer YOUR_JWT_TOKEN" \
-H "Content-Type: application/json" \
-d '{ "organizationId": "uuid" }'See API Documentation for complete reference.
- Architecture Guide - System design, tech stack, patterns
- AWS Integration - Complete Cost Explorer setup
- Monitoring Setup - Prometheus + Grafana configuration
- Multi-Tenancy Setup - Authentication and organization management
- API Reference - All endpoints with examples
- Contributing - Development guidelines
✅ Completed (Weeks 1-4):
- Production UI with Vercel-inspired design
- Real-time AWS cost tracking via Cost Explorer
- Prometheus + Grafana monitoring stack
- Command palette (⌘K) and quick actions
- Mobile responsive design
✅ Completed (Weeks 5-6):
- Cost Optimization Engine (CloudWatch integration, idle resource detection)
- DORA Metrics Dashboard (4 core metrics with benchmarks)
- Grafana dashboard templates (4 pre-built dashboards)
- Alert History UI (Prometheus alert management)
✅ Completed (Weeks 7-9):
- Multi-Tenancy Backend - PostgreSQL Row-Level Security, JWT authentication
- Multi-Tenancy Frontend - Login, register, organization switching
- Organization Management - Create, invite members, assign roles
- Encrypted AWS Credentials - Per-organization credential storage
- Team Collaboration - Invite members, manage permissions
- Complete Authentication - Email/password, forgot password, reset flow
📋 Planned (Future):
- SSO integration (Google, GitHub, Okta)
- Advanced RBAC with custom permissions
- Deployment logs streaming
- Service dependency graphs
- Terraform state tracking
- Audit logs and compliance features
DevControl implements enterprise-grade security:
- Authentication: JWT with 7-day access tokens, 30-day refresh tokens
- Password Hashing: bcrypt with 10 rounds
- Data Isolation: PostgreSQL Row-Level Security (RLS)
- Encryption: AES-256-GCM for sensitive data (AWS credentials)
- RBAC: 4 roles (Owner, Admin, Member, Viewer) with granular permissions
- CSRF Protection: Ready for production (commented placeholders)
- Rate Limiting: Infrastructure ready for protection
Need implementation help?
DevControl is production-ready for enterprise deployments:
- Deploy to your infrastructure (AWS, GCP, Azure)
- Multi-organization setup
- AWS integration configuration
- Team training (2-day workshop)
- 30-day support included
- Host multiple clients on your infrastructure
- Custom branding per organization
- SSO integration (Google, Okta, Azure AD)
- Enterprise support with SLA
- Dedicated account management
- Free: 1 org, 5 users, 10 services
- Pro ($49/month): 3 orgs, 20 users, 50 services
- Enterprise ($999/month): Unlimited everything + priority support
- AWS integration setup: $150-250/hour
- Custom feature development: $200-300/hour
- Architecture review: $2,000/day
- Team training: $2,000/day
Contact: projectmanager@wayuptechn.com • +1 (848) 228-9890
Schedule: calendly.com/goddeyuwamari
- Platform Engineering Toolkit - CLI tool for service creation and AWS deployment
- CloudBill - Multi-tenant SaaS billing platform
Contributions welcome! See CONTRIBUTING.md for guidelines.
- Fork the repo
- Create feature branch (
git checkout -b feature/amazing-feature) - Commit changes (
git commit -m 'Add amazing feature') - Push to branch (
git push origin feature/amazing-feature) - Open pull request
MIT License - see LICENSE
Goddey Uwamari
Founder & CEO, WayUP Technology
Senior Full-Stack & Platform Engineer
📧 projectmanager@wayuptechn.com
🔗 LinkedIn • GitHub
📍 Newark, NJ (NYC Metro)
Built with ❤️ for platform engineers managing AWS infrastructure
⭐ Star this repo • 🐦 Share on Twitter • 🤝 Contribute improvements