// THE HARD 20%, ALREADY PROVEN

Realtime infra that holds when things fail.

The hard part of realtime is staying correct when things break — lossless recovery across node failure and consumer-group rebalance, backpressure that survives slow clients. Sukko is proven on exactly that, in a public fault-matrix benchmark, and it runs inside your own AWS, GCP, or Azure account — so it deploys where the law requires.

start free → read the docs

⇄ wss://rt.yourdomain.com/ws — plain WebSocket, no SDK lock-in

clients web · mobile · services

↓↑ wss:// · plain WebSocket · JWT

YOUR CLOUD · YOUR VPC

sukko gateway auth · rate limits

↓↑ ws:// · proxied

sukko server routing · tenancy

↓↑ pub/sub

valkey broadcast bus fan-out across nodes

↓↑ pro edition

your kafka / redpanda history · replay

nothing leaves your account

// FEATURES

Everything a socket needs.

The multi-tenant realtime core you'd otherwise spend six months building — in every edition, including free.

Realtime pub/sub

Gateway → server → client WebSocket pipeline. Publish once, fan out to every subscriber.

Multi-tenancy

Per-tenant scoping across every data path — auth, channels, and quotas. One platform, many products.

JWT authentication

Signature, expiry, and issuer validation on every connection. Per-token revocation on Pro.

Rate limiting

Global, per-IP, and per-tenant limits enforced at multiple levels of the stack.

Provisioning API

REST API for tenants, API keys, topics, and channel rules. Automate everything.

Built for operators

Prometheus metrics, health & readiness endpoints, gRPC internals. Your stack, your dashboards.

Stream AI tokens

Stream LLM output token-by-token over WebSocket or SSE. Lossless recovery means a dropped connection never loses a token mid-response.

// HOW IT WORKS

Up and running in three steps.

Dry-run it locally

One command boots the whole platform on Docker Compose. Get a feel for it before anything touches your cloud.

$ sukko init && sukko up

Provision a tenant

Create tenants, API keys, and channel rules — via the REST API or the CLI.

$ sukko tenant create --name acme

Connect clients

Plain WebSocket from any language, or grab an official SDK. SSE and webhooks on Pro; push on Enterprise.

$ wss://rt.acme.dev/ws?token=…

any client — plain WebSocket shown · official SDKs available

const ws = new WebSocket(
  "wss://rt.yourdomain.com/ws?token=" + jwt
);

ws.onopen = () => ws.send(JSON.stringify({
  type: "subscribe",
  data: { channels: ["orders:eu"] },
}));

ws.onmessage = ({ data }) => render(JSON.parse(data).data);

// OPERATOR TOOLKIT

Operate it like you built it.

You run the platform, so we ship the tools to run it well — a full CLI, a load-testing service, and a web Admin UI.

sukko-cli ALL EDITIONS

Tenants, keys, rules, quotas, JWT tools, license management — plus publish/subscribe from your shell and a local dev stack.

tester ALL EDITIONS

Integration test service with smoke, soak, stress, and validate suites. Live metrics over SSE while the load runs.

admin ui PRO

Web tenant management with real-time usage analytics and live connection inspection, for folks who don't live in a terminal.

// GET STARTED

Your sockets are waiting.

Try it locally in minutes, then deploy into your own cloud with Helm. Community is free, forever.

start free → see pricing