Openkubectl port-forward svc/zeus-os 5050 && open https://localhost:5050
Zeus OS — The control plane for KubeVirt
Built natively on KubeVirt

Every VM. One control plane.

Zeus OS turns Kubernetes into a private cloud you can actually see. Create, run, migrate, secure and cost every virtual machine from a dashboard, a terminal or an API.

$ helm install zeus-os oci://ghcr.io/zyvorai/charts/zeus-os --version 0.3.0 --set-string config.localAuth.adminPassword=YOUR_PASSWORD
zeus-os · Compute · Virtual machines
WorkspaceComputeKubernetesStorageNetworkingObserveAIFinOpsSecurityDeliveryAdmin
Running VMs0
Nodes ready0
Live migrations0
Needs attention0
NameNamespaceStatevCPUMemory
web-prod-01acmeRunning416 GiB
db-primaryacmeMigrating1664 GiB
win-build-07ciRunning832 GiB
gpu-train-02researchPending32128 GiB
edge-gw-03netRunning24 GiB
# sample data for illustration
$ zeus-os vm list -n acme
web-prod-01 Running
db-primary Migrating → node-07
$ zeus-os node cordon node-03
✓ cordoned, 0 VMs affected
$
The platform

Everything a private cloud needs. Nothing it doesn't.

Zeus OS speaks Kubernetes and KubeVirt natively, using CRDs and subresources instead of shelling out. What you see is what the cluster is doing.

Console, anywhere

VNC and serial in the browser. Native RDP and SSH through your own client, with a downloadable .rdp file or a ready SSH command.

Live migration & DRS

Move running VMs between nodes and let auto-rebalance keep clusters level, with cooldowns and an audit trail.

Multi-tenant by design

Tenant-scoped views, quotas and RBAC across every list and action.

FinOps you can trust

One price model across every cost page, measured cost history, budgets and waste cleanup that starts as a dry run.

Networking you can see

Native flow, DNS and security-group views, zero-trust namespace isolation, and Cilium egress, BGP and Gateway API management.

Day-2 operations that act, carefully

Closed-loop remediation playbooks, snapshot and power schedules, backups, and a flight recorder for the cluster. A kill-switch guards every engine, and unknown values are shown as unknown, never as zero.

Ask Zyra

An assistant that answers from your cluster and your own docs, with citations, and keeps private code out of remote models unless you allow it.

One platform, four interfaces

Click it. Type it. Script it.

The dashboard, TUI, CLI and API share one engine, so they always agree.

zeus-os-cli
# headless, scriptable, destructive actions need --yes
$ zeus-os vm create --name web-01 --template ubuntu-24 --cpu 4 --memory 16Gi
$ zeus-os snapshot create web-01 --name before-upgrade
$ zeus-os node evacuate node-03 --yes
$ zeus-os --server https://zeus.example.com --token $TOKEN tenant list
zeus-os
VMs  Nodes  Storage  Quotas  Alerts  Backups  Flows  …48+ views
──────────────────────────────────────────────────────────
 NAME           NAMESPACE   STATE        NODE      CPU
 web-prod-01    acme        Running      node-02   ██░░░░
 db-primary     acme        Migrating    node-07   ████░░
 edge-gw-03     net         Running      node-05   █░░░░░
/ search   : command   ? help
REST + WebSocket
$ curl -H "Authorization: Bearer $TOKEN" \
    https://zeus.example.com/api/v1/vms?namespace=acme

{ "items": [ { "name": "web-prod-01", "state": "Running" } ] }

# OpenAPI spec, Python and Go SDKs, Terraform provider, Ansible collection
Dashboard
Light and dark appearance. A top navigation with 12 groups:
Workspace · Compute · Kubernetes · Storage · Networking · Observe
AI · FinOps · Security · Delivery · Developer · Admin

Ranked "Attention" feed, command palette, and a Hardware Studio for
hotplug, boot order, firmware, NICs and virtual devices.
Enterprise-ready

Secure by default. Honest by design.

Auth is on out of the box. Every mutation is role-checked, tenant-scoped and audited. When a feature is a preview, the product says so.

  • Local, LDAP, SAML and OIDC sign-in, plus SCIM v2 provisioning
  • WebAuthn security keys as a second factor
  • Preview-then-apply gates on risky network changes
  • Signed images, checksums and SBOM on every release
KeycloakOktaEntra IDLDAPSAML
ID
RB
AU
Get started

Run your cloud, not your tooling.

Free to try. The Helm chart and container image are public today; signed releases are on the way.

Try it nowOpen https://zeus.zyvor.dev and sign in as viewer with the password Zeus-Live-Demo-Viewer-2026! (a shared, read-only copy running on a small test cluster with a few tiny VMs)
Helmhelm install zeus-os oci://ghcr.io/zyvorai/charts/zeus-os --version 0.3.0 --set-string config.localAuth.adminPassword=YOUR_PASSWORD
Openkubectl port-forward svc/zeus-os 5050 && open https://localhost:5050