Product Hunt 🚀 Spekra Doctor is launching on Product Hunt! Follow & support our launch Notify Me →
Launching on Product Hunt · Spekra Doctor CLI Notify Me →
Observability & operations across nine suites

Understand your systems.
Coordinate the work that keeps them running.

Spekra brings infrastructure, application traces, logs, endpoint checks and incident response into one organization workspace—with dashboards, billing review, Docker configuration evidence and database schema comparisons. Start with the suites your team needs.

Explore the console or request access Explore all nine suites
🔒 Nine operational suite workspaces
⚡ Search across enabled suites
🐳 Local evaluation and Docker deployment
🛡️ Human-reviewed operational decisions

Observe, investigate and coordinate operations

Choose the supported workflows your team needs. Six suites passed recorded controlled matrices; FinOps, SecOps and AI/schema retain documented gaps. Availability depends on enabled features and adapter scope.

Application Performance & Tracing

Follow supplied request spans in waterfalls, review observed service statistics and query supported OTLP JSON metrics.

Examine request timing and related database or log evidence.

Span waterfallsObserved servicesOTLP JSON

Application Performance Monitoring with OpenTelemetry →

LogStream

Submit application logs, follow live updates, filter by source/level/time and search text or bounded regex.

Find relevant messages and follow supplied trace identifiers.

Live updatesFiltersTrace context

Application Log Management and Trace Context →

Synthetics & Endpoint Checks

Run real public HTTP/HTTPS checks with timing, certificate observations, history and linked failure/recovery incidents.

Review endpoint behavior and certificate evidence from one worker location.

HTTP/TLSCheck historyRecovery

HTTP Monitoring and TLS Certificate Checks →

IncidentOps & Runbooks

Coordinate incident timelines, on-call schedules, signed generic HTTPS paging, responder acknowledgement and opt-in escalation.

Keep response handoffs visible; run defined evidence and endpoint-verification workflows.

On-call rotationsSigned pagingAcknowledgements

Incident Management, On-Call and Signed Paging →

FinOps Billing Review

Import normalized billing JSON and inspect exact charges, credits, resource breakdowns and advisory spend findings.

Consolidate exported cost evidence without mixing currencies or estimates with billed charges.

Billing importsExact totalsReview findings

Cloud Billing Review with Exact Cost Breakdowns →

Custom Dashboards

Configure and save widgets and layouts using supported summaries from the suites enabled for your organization.

Keep recurring operational checks in a shared view.

Saved layoutsSupported summariesOrganization views

Custom Operational Dashboards →

SecOps Docker Review

Collect and import selected Docker configuration, inspect nine custom checks, and retain source evidence and audit history.

Make configuration review repeatable while identifying missing or stale observations.

Docker evidenceFreshnessAudit history

Docker Configuration Evidence and Security Review →

Schema Review & Experimental Learning

Capture and compare read-only PostgreSQL/MySQL schema evidence. Suite 1 separately supports opt-in reviewed datasets and advisory shadow comparisons.

Review supported structural changes and evaluate measured learning data; production AI diagnosis and automatic DDL remain unavailable.

Schema snapshotsComparison reportsHuman review

Compare PostgreSQL and MySQL Schema Snapshots →

Human-Reviewed Database Model Learning →

Review availability, deployment requirements and remaining limits →

Our other products

Explore 23 independent tools for engineering teams, shared plans and everyday work.

Explore all 23 products

Observability Made For Humans, Not Just SREs

For SaaS teams, platform engineers and agencies managing application operations: gather evidence, coordinate responders and make recurring reviews easier to follow.

⏱️

"My website is slow at 2 AM"

Bring the relevant request, database and host observations into the investigation.
With Spekra: Inspect an instrumented request, its database spans and related query observations. Engineers validate the cause and apply any change outside Spekra; production AI diagnosis and automatic index fixes are unavailable.
⚖️

"Forgot to add table in Production"

Old Way: Developer adds a column in UAT, deploys to Prod, customer gets a 500 error screen.
With Spekra: Schema snapshot review captures real PostgreSQL and MySQL metadata, compares retained baselines, and shows supported structural differences for review. Download snapshot and comparison JSON; administrators can remove comparisons and unreferenced snapshots. Production DDL execution remains unavailable.
💸

"Why did our AWS bill jump 40%?"

Old Way: End-of-month panic when the $8,000 credit card invoice arrives.
With Spekra: FinOps Billing Explorer imports your normalized billing exports, separates costs by currency and data kind, and highlights concentrated spend for review. Native cloud sync and automatic rightsizing remain planned.
🌐

"Is our public endpoint responding?"

Old Way: You only find out your SSL certificate expired when customers tweet about it.
With Spekra: The deployed synthetic worker checks an allowed public HTTP/HTTPS endpoint, records timing and certificate evidence, and tracks observed failure/recovery. A regional probe fleet is not implemented.

See Spekra In Action

These interactive examples are illustrative browser demonstrations. They are not live customer measurements or production certifications. See the current capabilities guide for supported workflows.

API-to-Database & Table Lineage Matrix — Live Trace Correlation Status: Operational (9 APIs Mapped)
Inbound API Route Microservice Target Database Tables & Operations Touched DB Latency Share Action
POST /api/v1/orders/checkout checkout-service PostgreSQL Order DB (Primary) 🗄️ users SELECT 🗄️ orders INSERT 🗄️ inventory_reservations 72.4% (351ms / 485ms)
Explain Plan
GET /api/v1/users/profile auth-service PostgreSQL Auth Cluster 🗄️ users SELECT 🗄️ sessions SELECT 36.8% (14ms / 38ms)
Explain Plan
POST /api/v1/payments/charge payment-service PostgreSQL Payments DB 🗄️ payments INSERT 🗄️ orders UPDATE 25.5% (42ms / 165ms)
Explain Plan
Schema Sync Concept Demo — Simulated UAT vs Production ⚠️ Drift Detected: 2 Missing Tables
Discrepancy Audit: UAT vs Prod
2 tables missing in Production • 17 columns out of sync • 8 missing indexes
4% Schema Health
-- Zero-Downtime Synchronization DDL Generated
CREATE TABLE IF NOT EXISTS audit_logs (id BIGSERIAL PRIMARY KEY, event_type VARCHAR(64), payload JSONB);
CREATE INDEX CONCURRENTLY IF NOT EXISTS idx_audit_logs_event ON audit_logs(event_type);
SpekraAI Autonomous SRE — Natural Language Telemetry Grounding Model: Telemetry-Grounding v2.4
Which API is hitting our database hardest and causing latency spikes?
✨ SpekraAI Analysis:
In the last 30 minutes, POST /api/v1/orders/checkout represents 72.4% of database execution time on cluster pulse_production.

Root Cause: The query SELECT * FROM users WHERE email = ? is executing a Sequential Scan over 45,000 rows because an index is missing on email.

⚡ 1-Click Fix: Apply Index Concurrently
FinOps Concept Demo — Planned Cloud Rightsizing Illustrative savings: $2,840/mo (demo only)
Idle Database Detected
db.m5.2xlarge (Staging)
Save $420/month by downsizing to db.t4g.medium
Unattached EBS Volumes
4 x 500GB gp3 Volumes
Save $160/month by removing orphaned disks
Compute Over-provisioning
Kubernetes Worker Fleet
Save $2,260/month with Karpenter auto-scaling

Reach the right responder.
Verify every handoff.

Plan coverage, send signed webhook pages, and follow the response from receiver acceptance to a signed-in human acknowledgement.

01 / COVERAGE

Know who is on call

Create scheduled shifts, daily or weekly rotations, and temporary coverage overrides. Timezone-aware handovers preserve local times across daylight-saving changes. The calendar exposes gaps and overlaps.

02 / ESCALATION

Keep the response moving

Enable acknowledgement deadlines for primary, secondary, and tertiary responders. Scheduled steps survive restarts and prevent duplicate child pages. A page acknowledgement or incident resolution stops waiting escalation.

03 / SIGNING

Let receivers verify the sender

Opt into HMAC-SHA256 signatures that bind the request body, time, organization, channel, and delivery ID. Signing secrets are encrypted on the server. Prepare a key, install it at your receiver, then activate it.

04 / RECOVERY

Review before re-paging

Check receiver health and review rejected, uncertain, blocked, or exhausted pages. A signed-in operator can send an explicit follow-up with a reason and audit history. Repeated requests reuse the same attempt.

Available now: generic HTTPS webhook paging, scheduled coverage, opt-in escalation, receiver checks, operator re-paging, and encrypted signing-key rotation. Local TLS receiver and browser checks pass. Your receiver still needs signature verification and replay protection; live staging acceptance remains environment-specific. Authenticated generic receiver callbacks now support delivery receipts and mapped responder acknowledgements. Unmapped identities require review; native provider adapters remain planned. Production runbooks now capture incident evidence and recheck tenant-owned synthetic monitors, with dry-run validation, measured results, persisted history and duplicate-request protection. Infrastructure-changing remediation commands remain demo-only.

Open the console →How webhook signing works

Configure signing and escalation through an organization administrator. Signing and automatic escalation are opt-in.

Find evidence. Share context. Set up the right access.

Supporting workflows connect the suites your organization enables.

Search your organization workspace

Find selected targets, traces, logs, incidents, monitors, billing records and saved dashboards across enabled suites. Access is checked again when opening a result; search covers bounded recent records.

Explore search and organization access →

Investigate in a shared time window

Review permitted traces, logs, query aggregates, host samples and timeline events around an incident. Labels distinguish explicit identifier links from contextual matches.

Explore incident investigations →

Evaluate with a reviewed pilot

Agree the required suites and success measures, review setup milestones and collect feedback. Approved customers choose their password through a single-use invitation delivered by the operator.

Explore pilot onboarding and deployment →

Your telemetry. Your review.
Better database diagnostics.

Build a feedback loop around measured PostgreSQL and MySQL telemetry. Your team confirms the evidence; models stay in shadow mode.

01 / CAPTURE

Start with explicit opt-in

An organization administrator enables collection. Capture numeric connection usage, blocked sessions, and collector-host CPU. Incomplete measurements are skipped.

02 / REVIEW

Confirm what happened

Label normal behavior or multiple concurrent faults. Group observations from the same incident and correct suggestions that disagree with the evidence.

03 / EVALUATE

Train a version you can trace

Export reviewed records as a frozen, checksum-versioned dataset. Separate training runs evaluate later observations and a held-out site before reporting readiness.

04 / COMPARE

Keep people in control

Import a candidate for advisory comparisons. Uncertain predictions and readings near learned thresholds abstain. Collection can be disabled and stored learning data deleted.

Available now: the Suite 1 collection, review, export, training, and shadow workflow. Nine suite-specific synthetic baselines are experimental; real-data candidates need sufficient opted-in, reviewed telemetry and independent validation. Predictions never execute remediation. CPU describes the collector host, which may be separate from the database.

Open database model review →How training and privacy work

Organization administrator sign-in required. Use the Database model review link in your console’s suite menu.

Up And Running In Under 60 Seconds

No complex YAML configurations. No intrusive kernel modules.

01

Choose the suites and sources

Agree which workflows matter: infrastructure, application evidence, endpoint checks, incident response or imported cost/configuration review. Set up the required collectors, exporters or imports and verify permissions, network paths and redaction.

npm run agent -- https://YOUR-CONSOLE-HOST
02

Verify the workflow end to end

Check that your selected sources arrive with useful identity and timestamps. Exercise an instrumented request, endpoint failure/recovery, paging handoff or billing/configuration import according to your pilot goals.

✓ Service identity supplied
✓ Instrumented spans exported
✓ Related evidence reviewed
03

Review evidence and measure value

Build a saved dashboard, use search to find the relevant records and investigate shared evidence. Measure the time your team spends on the selected operational task before and during the pilot.

Release hardening includes an HTTPS proxy profile, verified backup/restore tools, session revocation and bounded requests. Local checks do not certify public DNS, certificate renewal, sustained load or compliance. Public rollout requires operator verification.

Workspace search finds enabled suites and recent tenant-owned records. Results and feature filters follow your organization’s current entitlements, with access checked again when you open a result.

✓ Supported features selected
✓ Source timestamps checked
✓ Human approval for changes

Evaluate one repeated operational task

Choose an investigation, on-call handoff, endpoint check or billing/configuration review. Compare the effort before and during your pilot. Include setup, hosting and maintenance effort. There is no verified fixed saving or complete vendor-replacement guarantee.

Review features and limits →

Native OpenTelemetry (OTel) Ingestion Guide

Send OTLP JSON traces and metrics to your Spekra application. Use your organization’s API key and application URL; this marketing website is not a telemetry receiver.

Metric gauges, sums and explicit histograms are stored per organization and available in the APM metrics table or GET /api/v1/apm/metrics. Inspect partial-success responses for rejected points; exponential histograms and summaries are not supported.

POST/v1/tracesOTLP JSON
POST/v1/metricsOTLP JSON
# Connectivity tests; empty batches do not create trace spans.
export SPEKRA_URL="http://localhost:4000"
export PULSE_API_KEY="YOUR_TENANT_API_KEY"

curl --fail-with-body "$SPEKRA_URL/v1/traces" \
  -H "Content-Type: application/json" \
  -H "X-Pulse-Api-Key: $PULSE_API_KEY" \
  --data '{"resourceSpans":[]}'

curl --fail-with-body "$SPEKRA_URL/v1/metrics" \
  -H "Content-Type: application/json" \
  -H "X-Pulse-Api-Key: $PULSE_API_KEY" \
  --data '{"resourceMetrics":[]}'

Tenant-scoped ingestion

Use an API key from the organization that owns your telemetry. Invalid credentials are rejected.

JSON receiver

The application accepts OTLP JSON. The Collector converts SDK OTLP traffic to JSON and sends uncompressed requests.

SDK compatibility

The Collector example uses the current otlp_http exporter name. Older Collector releases may use otlphttp; check your installed version’s documentation.

Collector configuration reference: OpenTelemetry OTLP HTTP exporter documentation.

Explore the full platform

Feature guides covering all nine suites, connected workflows, setup, customer value and current limits.

Controlled Scenario Tests Across All 9 Suites

Local production-mode acceptance uses sample tenants, Docker databases and measured workloads. These results describe a finite test matrix, not production certification or a customer uptime guarantee.

Six suites passed their controlled matrices

Database monitoring, APM, logs, synthetics, incident workflows and dashboards were exercised with sample tenants. Coverage includes positive and negative cases within the recorded scenarios.

Three suites have partial coverage

FinOps uses normalized billing imports; live provider coverage remains unverified. SecOps covers read-only Docker configuration evidence. Suite 9 supports read-only PostgreSQL and MySQL schema comparison; production AI diagnosis and DDL remediation are unavailable.

Availability also depends on your plan, configuration and supported source. Validate your own workload in a guided pilot before relying on an operational workflow.

Review supported capabilities and limits →

Choose the workflow your team needs

Assess supported collection, source coverage, retention, integration effort and operating cost. We do not claim independently benchmarked superiority over other products.

Supported capabilities and remaining gaps →

Simple, Predictable Plans

Indicative published pricing. Confirm features, capacity, support and terms before purchasing; automatic checkout and subscription enforcement are not implemented.

Starter
$29/target/mo

Perfect for early-stage startups and small projects.

  • Up to 3 Monitored Targets
  • Database, Synthetics and Dashboards
  • 7-day Telemetry Retention
  • Slack & Webhook Alerts
  • Administrator-managed organization access
Get Started Free
Enterprise
Custom

For security-conscious enterprises with custom compliance needs.

  • Target limits agreed for the deployment
  • Selected supported suites and deployment review
  • 90-day+ Telemetry Retention
  • Dedicated Technical Support
  • Custom Retention Periods
  • SSO / SAML not currently available
💬 WhatsApp: +91 63698 71262 ✉️ subashthiruppathy@gmail.com

Frequently Asked Questions

Everything you need to know about Spekra deployment and security.

Signing is opt-in. Configure the server's signing-key storage, then an organization administrator prepares a secret, installs it at the receiver, and activates it. Secrets are encrypted at rest and returned once during preparation. Rotation provides five minutes of old/new signature overlap, with early retirement available. Receivers must validate the raw body, timestamp, organization, channel, and delivery ID, then prevent replayed delivery IDs. HTTP acceptance is recorded separately from a responder's signed-in acknowledgement. Live receiver acceptance must be verified in your staging environment; generic receiver callbacks use separate inbound keys and explicit responder mappings. Unmapped acknowledgements require review and leave escalation running; native provider adapters remain planned.
No. Database learning starts disabled. An organization administrator opts in, captures numeric PostgreSQL or MySQL measurements, confirms labels, and exports a versioned dataset. Training is a separate operator-run step. Exports exclude SQL, hostnames, credentials, and reviewer identities; timestamps and pseudonymous sample, site, and episode IDs remain. Disabling stops new collection and exports. Deleting learning data removes stored samples, datasets, and candidates; downloaded copies remain under your control.
No. The nine suite models are experimental synthetic-data baselines. Reviewed real-telemetry training is currently available for Suite 1. It requires at least three target/collector pairs and five observation days, plus sufficient confirmed normal and abnormal labels in every evaluation split. Training uses temporal and site holdouts; imported candidates stay in shadow mode and never execute remediation. Real-world validation and calibration are still required.
What does Spekra help engineering teams do?

Spekra brings infrastructure and database monitoring, application traces, logs, endpoint checks, incident response, dashboards, imported billing review, Docker configuration evidence and schema comparison into an organization workspace. Teams search enabled suites, investigate evidence and coordinate operational work.

Are all nine suites production-complete?

No. Six suites passed retained controlled real-data matrices. FinOps, SecOps and AI/schema coverage remain partial. Production AI diagnosis, automatic remediation and compliance certification are unavailable.

Can Spekra guarantee zero overhead or complete anonymization?

No. Measure collection impact with your workload. Database query normalization is limited to its collection path; logs and trace attributes require upstream redaction. Deployment, retention and encryption requirements need review.

How do guided pilot requests work?

A reachable application backend stores requests for operator review. Approved customers receive a manually delivered single-use invitation and choose their own password. Static hosting alone does not save requests or send email. Contact the operator if the backend is not available.

Request a guided pilot →

Direct Contact & Technical Support

Connect directly with our engineering and architecture team for onboarding, custom deployments, or technical questions.

💬

Chat on WhatsApp

Instant answers from our technical team for sales inquiries, live demos, and private cloud rollout.

WhatsApp Number: +91 63698 71262
💬 Open WhatsApp Chat →
✉️

Direct Email Support

Send your infrastructure architecture questions, RFP documents, or proof-of-concept requirements.

✉️ Send Direct Email →

Ready to see your entire stack in full clarity?

Start with one staging application, an agreed investigation task and a measured pilot outcome. No fixed savings or MTTR improvement is guaranteed.

🚀 Launch Live Console Now Notify on Product Hunt → 📖 Read 60-Second Setup Guide
Data handling notice: Telemetry, logs and trace attributes can contain sensitive information. Configure upstream redaction and agree access, retention and hosting requirements. Spekra does not issue a compliance certification. Contact: subashthiruppathy@gmail.com.