Private images, one host.

A private OCI registry on one host. Docker and Podman push and pull as they always have.

Pushes freeOutbound from $0.01 per GB⁠[1]

Join the waitlist Open the docs

On your own devices or ours, inside your private cloud's own network. Billed by the hour, no minimum term.

What you get

Four things to know.

  • Build pipelines
  • Kubernetes deploys
  • Private base images

  • One host, your namespace

    Repositories appear on first push, with hierarchical paths.

  • Robot tokens for build agents

    Per project, shown once, with a documented rotation order.

  • Pull wiring for Kubernetes

    One image pull secret, or patch the default service account.

  • Exit by digest

    OCI manifests and layers; skopeo, crane or docker pull.

Price

Price

ItemRate
PushesFree
Pulls inside Triple X CloudFree
Transfer outFrom $0.01 per GB
Not yet
  • Tokens scope to a project, not to one repository.
  • Image scanning and tag immutability are not yet offered.
Where it runs

On our nodes or your own devices, inside your private cloud's own network. If a node fails, work moves across the network under the policy you set.

The four tiers and the price index

Get started

Start on the free tier today.

Or talk to Triple X about running it on your own devices.

  1. 01

    Join the waitlist.

    Tell us what you want to run and where. No credit card.

    TakesTwo minutes

  2. 02

    Push an image.

    docker login, docker push. Nothing else changes.

    TakesA minute

  3. 03

    Bring your own servers.

    Triple X sets up your private cloud on them.

    WhoTriple X

We never ask for your root credentials, API keys or bank details by email.

Join the waitlist Talk to Triple X
All products

At a glance

The numbers a buyer asks for.

Standard, rates and credentials for a private registry, each with where to check.

WhatTriple X CloudWhere to verify
StandardOCI; Docker and PodmanDocs, August 1, 2026
PushesFreePricing page
Pulls inside Triple X CloudFreePricing page
Pulls from outsideTransfer from $0.01 per GBPricing page
Time to a repositoryAppears on first pushYour first push
CredentialsRobot tokens per project, shown onceDocs, robot tokens
Kubernetes wiringOne image pull secretDocs, pull wiring
Exitskopeo, crane or docker pull, by digestDocs and Pricing page

Questions

What buyers ask before they sign.

In the order they come up. Every answer ends with where to check it.

Show questions about

9 answers

All questions
Will docker push and pull just work?

Yes. It is a private OCI registry on one host. Docker and Podman push and pull as usual, and repositories appear on first push with hierarchical paths. Kubernetes pulls with one image pull secret.

Proofthe container registry overview, August 1, 2026.⁠[2]

What does the registry cost?

Pushes are free. Pulls inside Triple X Cloud are free. Pulls from outside are metered as outbound transfer from $0.01 per GB. No storage line for images is published; ask Triple X in writing if you hold many large images.

Proofthe published rates on this page and the Pricing page.⁠[1]

What does it cost to leave?

Outbound transfer from $0.01 per GB and nothing else. Images are OCI manifests and layers, so skopeo, crane or docker pull copies them to any other registry by digest. No exit fee.

Proofthe exit tools named in the documentation and the transfer bands in the published pricing.⁠[2]

Who can pull my images?

Holders of a robot token for that project, or users in your private cloud. Tokens are shown once and revoked one at a time. The platform underneath sees that a repository exists and its size, not what the layers contain.

Proofthe robot token guide in the documentation and the access table on the Security page.⁠[2]

Can the registry run on my own hardware?

Yes. The registry host can be a device you own inside your private cloud, so images never leave your network. Triple X quotes the platform charge in writing. Hosted capacity is available where you do not own hardware.

Proofthe Sovereign page and a written quote from Triple X for your private cloud.

What happens when the registry host fails?

It is one host. Work moves across the network under your policy, but the published documentation states no replica count for images. Keep a second copy of production images elsewhere, or ask Triple X in writing.

Proofthe single-host statement in the documentation and the Reliability page.⁠[2]

What proof exists behind it?

A SOC 2 Type II examination with an unqualified opinion, period November 1, 2025 to January 30, 2026, no exceptions noted. The full report is available under NDA. Operator actions are logged.

Proofthe SOC 2 Type II report under NDA, Prescient Security.⁠[3]

How do I start, and what do I need?

Create an account, create a project and a robot token, then docker login and push. For Kubernetes, add one image pull secret or patch the default service account. You need Docker or Podman and a CI runner.

Proofthe pull wiring guide in the documentation, August 1, 2026.⁠[2]

What is not included yet?

Tokens scope to a project, not to one repository. Image scanning and tag immutability are not yet offered, so scan in your pipeline and pin deploys by digest. Ask Triple X in writing for anything else you need.

Proofthe Not yet list on this page, checked October 2026.