Fix your Capacitor app today.
Not after review.
Live updates with rollouts, auto pause and one click rollback. Same core features as Capgo, about half the price. Built for US, Canadian and UK mobile teams by BufferSol Technologies.
npx @buffersol/hotrail initFree plan, 500 MAU, no card. Read the docs
@capgo/capacitor-updater? Change three URLs.G 12,408 on 2K46 A 4,102 on 2K47 (25%) R 0.4% failures
A broken bundle should not cost you three days.
You shipped a JS or CSS change. It crashes on launch for some users. The fix is one line and the store review queue is 1 to 3 days. Meanwhile the one star reviews arrive.
| Time | What happened |
|---|---|
| 09:12 | Bundle 2K47 goes out to everyone. |
| 09:40 | Crash reports climb. The fix is ready at 09:55. |
| Next week | Store review finishes. With Hotrail: 10:05, the fix is on devices. |
Ship the web layer straight to installed apps. Roll it out slowly. Pause it automatically. Reverse it in one click.
Built for the bad day
Rollouts that stop themselves
Any percentage from 1 to 100, sticky per device. If failures pass your threshold after the minimum sample, the rollout pauses. Target: synthetic failures pause within 2 buckets.
R 4.1% failures on 2K47 at 25%. Rollout paused. (Sample)
Reverse in one click
The channel points at the previous bundle and the manifest switches in under 10 seconds (target). A bundle that crashes on boot reverts itself on the next launch.
Reverse to previous: 2K47 back to 2K46, then the siding. (Sample)
Native safe by default
Every bundle carries a native fingerprint. A device on a native build that lacks a plugin gets no update, not a crash.
12,408 devices run native build 1.8.0, which lacks @capacitor/camera 8.2. They stay on 2K46 until you ship a store build. (Sample)
Signed, always
An Ed25519 signed manifest for every bundle, signing on by default, and the plugin rejects a tampered manifest. No third party in your update path.
Signed Ed25519 ✓ (Sample)
Deltas, not downloads
Files are content addressed. A second upload of the same build sends under 1% of the bytes (target).
Sent 0 of 214 files, 0.0 MB (Sample)
Three commands from build to device
Step 1: Init
Finds your appId, adds @buffersol/hotrail-updater (coming) and offers migration mode if you use @capgo/capacitor-updater.
npx @buffersol/hotrail initStep 2: Upload
Hashes your files, sends only the new ones, signs the manifest and rejects native files.
npx @buffersol/hotrail upload --dir distStep 3: Release
Point a channel at the bundle at 10 percent and watch it reach devices. The first Applied event is your first update.
npx @buffersol/hotrail release --channel production --bundle 2K47 --percent 10
Web layer only.
Native changes still go through the stores. We block native files at upload. Apple Guideline 2.5.2 and the Developer Program License Agreement, and Google Play's policy on JavaScript in a webview, are the rules to read.
Compliance guide: coming. We never claim Apple approved this.
Already on @capgo/capacitor-updater? Change three URLs.
Point updateUrl, statsUrl and channelUrl at Hotrail. Swap the plugin at your next store build.
Read the migration guideComing from Ionic Appflow?
Access ends 31 Dec 2027 (Ionic announcement). Import guide coming.
Half the fare. Same line.
Prices in USD. Annual saves the dollar amount shown on each plan.
Free
For one side project and a first live update
$0free
No credit card needed.
- 500 monthly active users
- 2 apps
- 10 GiB fair use storage
- 7 day event history
- Community support
Solo
For indie developers shipping every week
$71.88per year
Saves $12 a year against monthly.
Capgo lists $12 a month, billed yearly (checked 3 Nov 2026).
Cancel anytime from your account.
- 2,000 monthly active users
- Unlimited apps and members
- 100 GiB fair use storage
- 30 day event history
- 60 build minutes a month (coming in v1)
Maker
Most popularFor teams that need rollouts and auto-pause
$203.88per year
Saves $36 a year against monthly.
Capgo lists $33 a month, billed yearly (checked 3 Nov 2026).
Cancel anytime from your account.
- 10,000 monthly active users
- Auto-pause rollouts and webhooks
- 1 TB fair use storage
- 60 day event history
- 300 build minutes a month (coming in v1)
Team
For studios and apps with a large install base
$503.88per year
Saves $96 a year against monthly.
Capgo lists $83 a month, billed yearly (checked 3 Nov 2026).
Cancel anytime from your account.
- 100,000 monthly active users
- Priority email (SSO coming in v1)
- 10 TB fair use storage
- 90 day event history
- 1,200 build minutes a month (coming in v1)
Scale
For Appflow migrations, SLAs and security reviews
From $124.99 a month, sales assisted.
- 1M monthly active users
- 99.9% SLA and DPA
- Dedicated Slack channel
- Annual contract with migration help
No bandwidth meter. No seats. Hit your limit and your app keeps running; we pause new downloads and ask. Capgo list prices checked 3 Nov 2026. Build minutes ship in v1.
Security in plain facts
- Signing on by default
- Audit log on every plan
- Org roles with scoped API keys
- An MIT plugin you can read (coming)
- Export of bundles, manifests and events
- No third party in the delivery path
- SOC 2: not yet. See the security page, the DPA and our pen test plan.
Built for agents and CI
Run the CLI in GitHub Actions or GitLab CI. An MCP server (upload, release, rollback, stats) is coming; an agent release needs your explicit confirmation, and there is no LLM on our side. llms.txt is live.
See the CI recipesnpx @buffersol/hotrail release --channel production --percent 10Questions, answered
Is over the air allowed by Apple and Google?
For the web layer, generally yes. Apple Guideline 2.5.2 and the Developer Program License Agreement carve out interpreted JavaScript run by WebKit that does not change the app's primary purpose. Google Play's Device and Network Abuse policy exempts JavaScript in a webview. Native changes still go through the stores, and we block native files at upload. Read the current rules yourself, this is not legal advice.
Can I self host the plugin for free?
The plugin is MIT today (coming with the update API). The Free plan plus export covers most side projects. A self host edge worker is on the roadmap.
Will you be around in two years?
Hotrail is built by BufferSol Technologies.
Do you have SOC 2?
Not yet. See the security page, the DPA and our penetration test plan.
What happens when I hit my limit?
Your app keeps running its current version. We pause new downloads and ask you to upgrade.
Who owns the account if my agency leaves?
Org transfer and export are v1 features. Today you can export bundles, manifests and events.
Why about half the price?
Our own edge code, object storage with no egress fees, and deltas that send fewer bytes.
What does it not do?
React Native, Flutter, native code changes and store publishing, for now.
Which Capacitor versions?
The Hotrail plugin needs Capacitor 6 or later. In migration mode you keep @capgo/capacitor-updater, so you keep the Capacitor versions it supports.
What do you collect from devices?
A random device ID, app version, OS and platform. No IP address is stored.
Your next hotfix should take minutes.
Start on the Free plan, then run npx @buffersol/hotrail init.
Free plan, no card.