Now Available — Free Download

Kube Hammer

Operations Engine

A Kubernetes desktop built for real operations.
AI built in.

Pods, logs, shell, YAML, and RBAC unified in one interface. Every change is snapshotted beforehand. AI diagnostics use full cluster context for root-cause analysis. Works offline and sends zero telemetry.

Local-First Credentials
Air-Gapped Ready
Full Audit Trail
context: production-eu-west

api-gateway-pods

api-gw-7f8c9d9c5d-9w2gs

platform-prod

Running

api-gw-7f8c9d9c5d-2lm7k

platform-prod

CrashLoopBackOff

$ kubectl logs -f api-gw-7f8... --tail=100

[info] Server started on port 8080

[success] Database connection established.

[error] Redis connection timeout after 5000ms.

[fatal] Readiness probe failed. Exiting.

root@api-gw:/app# _

Pods, Logs, Shell
Core Operations
YAML, Graph, AI
Unified Analysis
0
Telemetry Leaks
24+
Bundled Plugins

Operational Capabilities

Daily Kubernetes workflows, unified in one interface.

Find workloads, check state, open a shell, tail logs, and edit manifests without switching between multiple tools.

Resource Graph

See how your Ingress, Services, Deployments, and Pods connect at a glance. An interactive architecture graph designed for operational clarity, not visual novelty.

Ingress Service A Service B

Terminal and Real-Time Logs

Full xterm.js terminal for multi-container pods. Stream logs in real time with regex filtering, without needing to open a separate window.

xterm.js
❯ kubectl exec -it core-db-0 -- /bin/sh
Connecting to container (postgres)...
root@core-db-0:/data# _

AI Diagnostics: Cloud or Local

Two options: FizyonAI Cloud for hosted root-cause analysis with end-to-end encryption, or bring your own local Ollama model (BYOK) when no data can leave the network.

Why is api-gateway pod continuously crashing?
Logs show the readiness probe on port 8080 is timing out. Check your database connection string in configmap/db-settings.

Safe Operations Engine

Every change made through Kube Hammer is snapshotted before it is applied. Deleted resources can be restored with a single click. Timed operations auto-revert when the window expires. The Timeline tab overlays your operations with live Kubernetes events, making root causes easy to identify.

Snapshot captured before apply
Conflict check: resourceVersion matched
External change detected. Force revert?
Force Revert Cancel
Product Tour

See it in action.

Real screens from the desktop app — no mockups. Every view is built for fast, safe day-to-day Kubernetes operations.

Live Cluster Overview — Kube Hammer

Live Cluster Overview

Pods, status, and an integrated terminal in a single context-aware workspace.

Resource Relationship Graph — Kube Hammer

Resource Relationship Graph

Visualize ownership and dependencies as an interactive DAG to trace any resource.

Monaco YAML Editing — Kube Hammer

Monaco YAML Editing

Edit manifests inline with full IntelliSense, validation, and snapshot-before-apply safety.

AI Diagnostics — Kube Hammer

AI Diagnostics

Context-aware checks surface cloud auth, metrics, and state-change root causes instantly.

Node & Infrastructure View — Kube Hammer

Node & Infrastructure View

Cluster-level visibility into nodes, capacity, and health for confident operations.

Workload Management — Kube Hammer

Workload Management

Deployments, rollouts, and scaling controls with safe, reversible actions.

Security & Governance

Security-first by design.

Snapshots before every change, conflict checks on rollback, sandboxed plugins with AST scanning. Your credentials never leave your machine. Designed to meet the standards DevSecOps teams demand.

AST Malware Scanning

Every plugin in the marketplace undergoes Abstract Syntax Tree (AST) static analysis. Obfuscated payloads and hidden data exfiltration attempts are automatically blocked.

Plugin Sandboxing

Plugins run in a strictly isolated context. If a UI-only plugin attempts to access the network, the Kube Hammer core blocks it at runtime.

Cryptographic Licensing

Protected against MitM (Man-in-the-Middle) attacks. Enterprise tool licenses use RSA-signed JWTs verified by hardcoded public keys.

Air-Gapped & SSO Ready

Requires zero inbound ports. Supports enterprise SSO and offline deployment for highly regulated environments. Never sends telemetry by default.

Cluster Drift Detection and Time Travel

ClusterDiffEngine structurally compares all resources across two cluster contexts (e.g. prod vs staging). ResourceSnapshotStore holds a 24-hour state ring buffer: ask what any pod looked like 30 minutes ago and get a precise answer.

> HAMMER_SDK_V2

SDK 2.0: Production-grade internal tools.

No proprietary language to learn. The plugin SDK is built on React and Zustand. Includes a Worker pool for heavy transforms, ServiceBus for inter-plugin communication, and ActionPipeline for intercepting commands.

UI Slots

Inject React components into designated interface points.

Strict Permissions

Sandboxed architecture. Explicitly declare network access in the manifest.

CRD Registry

Register your custom resource types and they appear natively in the sidebar.

Service Bus

Secure inter-plugin communication without tight coupling.

MyFeaturePlugin.tsx
import React from 'react';
import { registerPlugin, createPluginSDK } from '@kube-hammer/sdk';

// 1. Register the plugin interface
registerPlugin({
  id: 'custom-ci-viewer',
  label: 'Internal CI/CD',
});

// 2. Activate extension points
export default function activate() {
  const sdk = createPluginSDK('custom-ci-viewer');

  /* Inject React component */
  sdk.slots.register(
    'sidebar-top',
    () => <MySidebarComponent />
  );

  /* Add right-click menu to Pods */
  sdk.resources.addAction({
    id: 'trigger-pipeline',
    label: 'Restart Pipeline',
    resourceTypes: ['pods'],
    handler: async (resource) => {
      await window.kubectl.execCommand(
        `kubectl rollout restart ${resource.name}`
      );
    }
  });
}
Main > src > plugins > internal
UTF-8TypeScript

Transparent pricing, flexible tiers.

Community is free forever for individuals. Choose Enterprise for air-gapped architecture, enterprise security, and centralized management.

Community

Free

Core features for individuals and small teams.

  • All core K8s operations
  • Terminal & Log Streaming
  • YAML editor
Download Free
Most Popular

Pro

$17/user/mo

Advanced analytics, AI integration, and full authorization.

  • Everything in Community
  • FizyonAI or Local Ollama Integration
  • Architecture Graphs and Detailed Diagnostics
Buy License

Enterprise

$28/user/mo

For highly regulated organizations and air-gapped architectures.

  • Everything in Pro
  • Enterprise SSO Integration
  • Air-Gapped deployment & 24/7 SLA
Talk to Sales
Get the App

Download and start in minutes.

Native installers for Linux, macOS, and Windows. Drop in your kubeconfig, manage your clusters locally with scoped tokens. No signup wall — only your email so we can send the download link and notify you of updates.

Cross-Platform Builds

Signed installers for Linux (.deb / AppImage), macOS (universal .dmg), and Windows (.exe).

Team Invitations

Bring teammates onboard with role-based invites and manage cluster access from a single portal.

Download Kube Hammer

Enter your email below — we will send a direct download link for every supported platform.

Get Download Link
Fizyonops Logo

Run your next operation with Kube Hammer.

Download the installer for your platform and take control of your clusters in seconds.

Download Kube Hammer