New — Iris AI drafts your firewall, routing & rate-limit rules. Explore AI features →

Ngris vs Vercel

Deploy from Git with previews and rollbacks, as on Vercel, and run more than the front end: backend containers, server-side rendering, WordPress and functions, with a managed database. Every app sits behind a WAF, bot protection, rate limits and edge login. An honest comparison: we only claim what our code ships today.

  • Push to deploy
  • SSR, Docker and functions
  • Tunnels on the same edge
Which one fits?

Choose ngris if you want

  • Any Dockerfile as a long-running container, next to your front end and behind the same edge
  • A managed database, backups and cron in the same app
  • A login with user accounts and roles, without writing auth code
  • Tunnels to your laptop or cluster through the same edge
  • WordPress in one click

Where ngris is still maturing

  • Edge locations in the EU and the US; apps run in our EU region
  • Static builds don’t use a build cache yet
  • Fewer framework integrations than Vercel

More than the front end

Vercel set the bar for git-push deploys with preview URLs. Ngris matches that workflow and runs the rest of the app behind a security edge.

DEPLOY

Push, build, live

Connect GitHub or GitLab; every push builds, with preview URLs, promote and rollback.

git push origin mainbuild · Next.js detectedimage scanned & signedngris edgepreview URLsrollbackyour domain//api/*your app · one URLstatic front endbackend container App hosting →
RUN THE BACKEND

One URL, two origins

/api goes to your backend container, the rest is static at the edge, with a MariaDB database.

GET shop.example.com/…ngris edgeyour policypath matcheverything else/api/*static filesfrom the edgebackend containergVisor sandboxMariaDBDATABASE_URL Full-stack apps →
PROTECT

A security edge on every app

WAF, bot protection, rate limits and a login for your users, set per app, with no code changes.

every requestngris edgebot scoreWAFedge loginrate limits200to origin302to sign-in403blockedsame rules for a tunnel or an app Edge login →

Ngris vs Vercel, feature by feature

A mark for ngris means it ships today. For Vercel we mark only facts from its own documentation, and the rows where Vercel is broader are marked too.

FeatureNgrisVercel
Build and deploy
Framework builds with auto-detection
Deploy on push from GitHub or GitLab
Deploy a folder from the CLI
Preview URLs, also per branch
Promote and instant rollback
Monorepo root directory and build overrides
Env vars and encrypted secrets
Build cacheContainer builds
Run the app
Server-side rendering: Next.js, Nuxt, SvelteKit, Remix, AstroAs a container
Any Dockerfile; Go, Node and Python backendsContainer Runtime, beta on all plans
Serverless functions that scale to zero
Edge functionsBeta
Managed databaseMariaDBVia Marketplace
Cron jobs
One-click WordPressNot built in
Performance and insights
Image optimization
Cookie-free web analytics
Speed Insights (Core Web Vitals)
Skew protection
ISR-style edge caching (s-maxage)
Security at the edge
WAF with your own rulesPlus a built-in baselineVercel Firewall
Rate limiting
IP and geo rules
Bot score and JA3/JA4 fingerprintsCheck plan
Under attack challengeAttack Mode
Private production and preview URLs
Login for your users: OAuth/OIDC, accounts, rolesNo code changesEnterprise: IdP sign-in, no codePassport; no user accounts or roles
Mutual TLS (client certificates)Check plan
Beyond hosting
Tunnel a service you run yourselfDev server onlyvercel dev --tunnel
Request inspector with replayCheck plan
Kubernetes operator10 custom resourcesNot built in
AI drafts firewall rulesIrisCustom rules, incl. rate limits
AI drafts every edge rule: firewall, rate limits, traffic policy, routing, alerts, error pages, edge functionsAll 7 rule typesFirewall, rate-limit and routing rules
AI assistant that reads your account and applies changes after you confirmIris; can also add firewall rules by itself, with auto‑rollbackVercel Agent, beta, Pro and Enterprise
MCP server for AI assistants340+ toolsVercel MCP
Edge locations worldwideEU and US
Framework integrations and marketplaceFewer

Ships today“Check plan”: we don’t claim a yes or a no. Vercel’s features and tiers change, so check vercel.com.

Move a project in a few minutes

Connect the same repository; the build is detected for you.

1

Create an app from your repo

Connect GitHub or GitLab in the dashboard or from the CLI. Use --type static for a static site and managed for server-side rendering.

ngris apps create shop --type managed --repo https://github.com/acme/shop
2

Copy your environment variables

Add --secret and the value is stored encrypted and never printed back.

ngris apps env set STRIPE_KEY=sk_live_… --secret
3

Point your domain

Connect your DNS provider and ngris writes the record and a wildcard certificate, or add a CNAME to cname.ngris.io and upload your own. Every deploy still gets its own preview URL. Domains

4

Turn on the edge

Attach a WAF or rate limit, turn on bot protection or edge login, or ask Iris to write the rule.

Frequently asked questions

Is Ngris a good Vercel alternative?

Yes, if you want more than a front end. Ngris deploys from Git with previews and rollbacks, as Vercel does, and also runs backend containers, server-side rendering, WordPress and functions, with a managed MariaDB database. Every app sits behind the same WAF, bot protection, rate limits and edge login as an ngris tunnel.

Can Ngris run Next.js with server-side rendering?

Yes. Deploy it as a managed app: Ngris detects Next.js, Nuxt, SvelteKit, Remix and Astro server builds and runs them as a container behind the edge. A static export deploys as a static site.

How do I move a project from Vercel to Ngris?

Create an app and connect the same GitHub or GitLab repository; Ngris detects the framework and runs the build. Copy your environment variables with ngris apps env set, adding --secret for secrets, then point your domain at the app with a CNAME to cname.ngris.io.

Does my site get a WAF and bot protection?

Yes. A hosted app is an ngris endpoint, so the Coraza WAF with its built-in baseline and your own rules, a bot score with an Under attack challenge, rate limits and edge login all work in front of it, set per app.

Where do Ngris apps run?

Static sites are served straight from the edge. Managed apps run in gVisor sandboxes in our EU region and are served from every edge region, in the EU and the US, over HTTP/1.1, HTTP/2 and HTTP/3.

Can I also expose services I run myself?

Yes. The ngris agent exposes a service on your laptop, a server or in Kubernetes through the same edge, and every rule you can put in front of a hosted app works in front of it too.

Your whole stack behind a security edge. Free to start.

Deploy a site, a backend or a function in minutes. No card needed.

Start free Hosting docs
Ask an AI to summarise this page