Back to Portfolio
In Development

Cylro Logo Cylro Logo Website Operations Platform

Many websites, one secure Space. Built in Luxembourg for EU teams.

cylro.com

Last updated: 22/05/2026

Plain-English view — built for everyone Full technical detail
1
one Space for every website
4
access roles per Space
100%
EU-managed infrastructure
2026
private alpha

How Cylro fits together

Platform architecture
Operator
agency · dev
builds & operates sites
↓
Client
scoped
white-labeled portal
Keycloak SSO ⇄
Cylro platform — one Space
Studio
Nuxt · Vue
page & content builder
Website Management
domains · SEO
publish · rollback · modules
Backend API
Node · Express
roles enforced per Space
Data & AI
Postgres · Redis
pgvector · Mistral
⇄
EU Infrastructure
Hetzner DE · Infomaniak CH · Mollie NL
Each Space is isolated and roles (Owner, Admin, Editor, Client) are enforced per Space. Published sites are immutable snapshots that roll back automatically — and all data stays on EU-managed infrastructure.

What Cylro does

Build sites in one Studio

Create pages, content and media in a visual builder — no plugins to juggle and no separate CMS.

Many websites, one Space

Agencies and teams run every client, brand or campaign site from a single secure place, with clear ownership and scoped client portals.

Publish safely, undo instantly

Every publish is a snapshot that's tested first and rolls back automatically if something breaks.

Your data stays in Europe

Hosting, email, payments and AI all run on European providers — EU-first and GDPR-friendly by design.

The Idea

Cylro is a platform I'm co-founding with a partner. It's built for EU agencies, freelancers, developers, and businesses that manage many websites across clients, brands, teams, divisions, campaigns, or locations. The goal is to make website operations feel controlled instead of fragmented.

Instead of spreading CMS, hosting, domains, SEO, publishing, rollback, access control, and AI help across separate tools, Cylro brings building and operating websites into one secure Space.

We started researching the idea in June 2025, during the final months of my Computer Technician diploma at Lycée Guillaume Kroll. That time helped us shape the vision and figure out the architecture we'd need. Development kicked off in August 2025, and we've been building steadily since then.

The platform combines Studio for page building with Website Management for domains, SEO, publishing, rollback, modules, and access. Public API access is planned for the broader release.

Under the Hood

Frontend

Nuxt 4Vue 3PiniaNuxt i18nCustom CSS
  • The client app is built with Nuxt 4 and Vue 3, using Pinia to manage state. We write most of the CSS by hand and use Nuxt i18n for multi-language support.

Backend

Node.jsExpress.jsPostgreSQL 16pgvectorRedis
  • On the backend we're running Node.js with Express.js. PostgreSQL 16 with pgvector powers the database and AI context, while Redis takes care of caching and sessions.

Spaces & Access

Keycloak SSOMulti-tenantOwner / Admin / Editor / ClientClient portal
  • We use Keycloak for SSO, but it sits behind our backend so we can add our own protection on top. Roles are kept simple for now: Owner, Admin, Editor, and Client, all enforced per Space.
  • One Space can run many client, brand, division, campaign, or location websites while keeping ownership and access clear.
  • Clients get a scoped, white-labeled portal for their website content while operators keep control of structure, publishing, domains, and risk.

Versioned Publishing

Immutable snapshotsApproval-firstAuto-rollback
  • Published sites are immutable snapshots. Changes are tested first, published intentionally, and rolled back automatically if something goes wrong.
  • Immutable published snapshots with approval-first changes

Permission-Aware AI

Mistral AISEO checksDraftsTranslationsLaunch readiness
  • AI is embedded as assistance, not the product identity. It can help with SEO checks, content drafts, translations, launch readiness, and operational guidance while respecting each user's role and access scope.

Infrastructure

Docker ComposeK3sHetznerInfomaniakMollieS3-compatible
  • Development runs locally on Docker Compose with the full stack in containers. The production direction is EU-managed infrastructure: Hetzner in Germany, Infomaniak in Switzerland for email operations, Mollie in the Netherlands for payments, Mistral in France for AI, and S3-compatible storage by design.
  • Core infrastructure runs on Hetzner in Germany, with Infomaniak for email, Mistral for AI, and Mollie for payments.

Why This Exists

01

When one team manages many websites, small tasks become operational risk: too many dashboards, unclear ownership, plugin or platform changes, separate logins, scattered backups, and hard questions about where data lives.

02

Cylro is our attempt to build a proper EU-first alternative: one managed SaaS Space where agencies and website operators can build, publish, roll back, assign access, answer trust questions, and treat websites like stable infrastructure instead of isolated installs.

What's Next

Core Architecture

Since · Aug 2025

Finalizing Studio, Website Management, publishing, rollback, module foundations, and permission-aware AI assistance.

Private Alpha

Target · 2026

Onboarding selected agencies, freelancers, developers, and business website operators to refine multi-site operations and the developer experience.

Release Hardening

Target · 2026

Preparing the public release with stable modules, API V1 access, monitoring, scaling, and a vetted path for future ecosystem growth.

Lessons So Far

Building a SaaS is more than code. Product positioning, onboarding, GDPR, providers, payments, access rules, and infrastructure shape the platform as much as the codebase. The biggest lesson so far is that multi-site operations need to be designed as one system from the start: publishing, rollback, permissions, AI assistance, and data sovereignty all affect each other.

Right Now

Cylro is actively being built and the private alpha is planned for 2026. Right now the focus is finalizing the website operations core, safe publishing, scoped access, EU provider integration, and permission-aware AI assistance.