We deploy. We scan.
We protect. We watch.
Connect GitHub and you're live in a European cloud in minutes. Every deployment runs 206 checks, and AI GroveDefender protects it at runtime.
No credit card · EU infrastructure · Human support · Static site from 4.10 €
Move your mouse over the cubes — they scatter and reassemble.
One platform instead of four disconnected tools.
Hosting, security scanning, runtime protection and monitoring talk to each other. A scan finding turns into a protection rule; an outage turns into an email.
- 01
GitHub
Pick a repository. Detection walks the root and subfolders and tells you what the app is built from.
- 02 hosting
Grove Cloud
Deployment to a European cloud. Static sites on a shared server, dynamic apps in their own container.
- 03 scanning
GroveCheck
206 checks against the public address right after deployment. Headers, TLS, leaked keys, malware.
Details → - 04 protection
AI GroveDefender
Runtime protection: prompt injection, data exfiltration, suspicious requests. Optional, one line of code.
Details → - 05 monitoring
Monitoring
Availability checked every 10 minutes. Depending on the plan, automatic restart or escalation to a human.
Details →
We deploy. We scan. We protect. We watch.
No account, no card.
Enter your website address. We run our real security scan against it — the same one that runs here after every deployment. It takes under a minute.
We only scan what the site itself serves from its public address. We store the result so we can show you all of it — how we handle data.
Hosting a static site with us costs 4.10 € a month — the scan after every deployment is included.
What sits between the internet and your app
You don't switch this on, configure it or pay extra for it. It is part of the hosting — the same on a static site from 4.10 € as on anything larger.
- 01
Visitor
A request from the internet
- 02
TLS certificate
Caddy issues and renews it automatically (Let's Encrypt). HTTP redirects to HTTPS.
- 03
Security headers
HSTS · CSP · nosniff · X-Frame-Options: DENY · Referrer-Policy · Permissions-Policy
- 04
Isolation
Static sites are served as files only; a dynamic app runs in its own container.
- 05
Your app
Runs in the EU — Hetzner, Nuremberg.
A scan after every deployment
206 checks against the public address. You see the score in your account right after the deploy.
Daily backups and rollback
Versioned images. Going back to the previous version is one click — nothing is rebuilt.
Defender at runtime
Optional runtime protection for your app — one line of code.
Three steps. No server, no Docker.
Grove Cloud reads the repository itself: it recognises Next.js, Vite, Astro, Express, FastAPI and your own Dockerfile, then proposes the build command, start command and port.
Connect GitHub
Pick a repository. Detection walks the root and subfolders (client/, server/, apps/) and tells you what the app is built from — and why it thinks so.
Click Deploy
Static sites go to a shared server from 4.10 €, dynamic apps into their own container. The address your-app.grovecloud.cz comes with a certificate right away.
Push and it deploys itself
You add the webhook to your repository once (we generate both the URL and the secret). After that every push deploys a new version and runs a security scan. If something breaks, one click takes you back to the previous build.
Hosting that checks itself after every deployment.
In 2026 data leaked from thousands of AI-written apps. Here every deployment is followed by 206 checks, Defender at runtime and daily backups — included, not sold as an add-on.
After every deployment
Headers, TLS, leaked keys, malware, phishing on our domain. You see the result next to your app before an attacker does.
Runtime protection
Runtime protection for the AI layer — prompt injection, data exfiltration, suspicious requests. The same Defender that runs on grovetechai.com.
Data in Europe
Servers in Germany, support in Czech and English, invoicing in CZK. No per-seat pricing in dollars.
Hosting is just the start. Secure operation is the whole product.
We compare against a category, not a named service — features change monthly and we don't want to claim something that won't hold in six months.
| Feature | Typical hosting | Grove Cloud |
|---|---|---|
| Automatic deployment from GitHub | yes | ✓ |
| AI / vibe-coded stack detection Next.js, Vite, Astro, Express, FastAPI or your own Dockerfile | sometimes | ✓ |
| Security scan after deployment included in every plan, doesn't consume your GroveCheck quota | usually not | ✓ |
| Leaked keys and misconfiguration check | external tool | ✓ |
| Security headers and TLS with zero config HSTS, CSP, nosniff, X-Frame-Options, Referrer-Policy | partially | ✓ |
| AI runtime protection optional, one line of code | — | GroveDefender |
| Availability monitoring | varies | every 10 min |
| Automatic restart on failure | varies | by plan |
| Human security escalation | — | by plan |
| Support from a real team, not a ticket bot | — | ✓ |
| Flat monthly price no per-seat pricing; invoiced in CZK, € shown for orientation | — | ✓ |
This site runs on Grove Cloud.
Every deployment of this page goes through the same process as customer apps: a GitHub build, security headers from the shared Caddy, 206 checks after deployment and an availability check every 10 minutes. Starter plan, 4.10 €.
Full status, including what we don't publish and why, is on the Service status page.
The same numbers as in the app.
Pricing is computed by a single engine from what the app actually needs. Pick your app type:
Starter
- Hosting for a static site or SPA
- Address and certificate included
- Automatic security scan after every deployment
- One-click rollback to the previous version
Secure Host
- Hosting and operation in a dedicated container
- Scan after every deployment, versioned images and rollback
- Uptime and response monitoring, email on an outage (at most once per 6 hours)
- Security headers and TLS included
Secure Plus
- Everything in Secure Host
- A crashed app restarts automatically, without waiting for a human
- Crash-loop detection — instead of another restart we call a human
- Outgrowing your plan shows up in the dashboard before it shows up on the invoice
Business
- Everything in Secure Plus
- Priority escalation to a human
- Regular operations and security report
- Tailored contract (SLA, liability cap, data processing)
Prices exclude VAT. We invoice in CZK (rate 24 CZK/€); € and $ amounts are rounded for orientation. Plans marked "coming soon" are still arranged manually — write to us and we'll set it up. Pricing generated from the app on 2026-09-11.
Before you decide
Do I need to know Docker or manage a server?
No. Pick a GitHub repository, we detect what kind of project it is and suggest the build command, start command and port. Static sites run from a shared server, dynamic apps in their own container — neither needs anything from you.
What exactly does the post-deployment scan do?
It runs 206 checks against your app's public address: headers, TLS, keys leaked in responses, malware, phishing on our domain. You see the result right after deployment and it doesn't consume your GroveCheck quota.
Will you fix the findings for me?
We configure the infrastructure side automatically — headers, TLS, isolation. Bugs in your own code we show you with a fix guide, but we don't rewrite your app. Promising to fix everything automatically wouldn't be true.
What happens if my app goes down?
We check availability every 10 minutes. Depending on the plan, automation restarts it or the outage is escalated to a human. You get an email — you don't have to watch the dashboard.
Where is my data and what do I pay in?
Servers are in Germany (Hetzner, Nuremberg). Invoicing is in Czech koruna; prices shown in euro are a conversion for orientation. No per-seat pricing in dollars.
Can I leave at any time?
Yes. Your code stays in your own GitHub repository the whole time; we only build from it. No proprietary format, no export to wrestle with.
Do I need a Grove Tech AI account?
Yes — one account covers GroveCheck, Defender and Cloud. You can still try the security scan right here on this page, without signing up or entering a card.
Your app is already running. Now let it run securely.
Grove Cloud combines managed hosting, GroveCheck and AI GroveDefender into a single security platform.