BETA

Komposia is in open beta — free, under construction, your feedback matters.

Read the manifesto

Runtime Engine

The architectural core that makes Komposia structurally different.

Everything in Komposia is JSON configuration interpreted at runtime. The Runtime Engine does not run arbitrary JavaScript — this is a deliberate security and stability guarantee.

JSON-First, Security by Design

Every aspect of an application is JSON configuration. The engine interprets — it does not blindly execute.

  • Components, stores, pipelines, agents — everything is JSON configuration
  • No arbitrary JS execution — the attack surface is structurally reduced
  • The engine interprets declarative structures, not imperative code

DSL & Pipeline Operators

~50 pipeline operators across 7 categories. The expressive power of a real language, without framework complexity.

  • Database operators: $find, $insertOne, $updateMany, $aggregate, $executeDatabaseWithTransaction
  • Flow control: $if, $switch, $foreach, $while, $parallel, $try
  • HTTP: $callApi with egress policy, input/output schema validation
  • Auth: $signIn, $signUp, $signInMFA, $signOut, $resetPassword
  • UI: $updateStore, $toast, $redirect, $setFormError, array manipulation
  • Typed expressions (ExprNode), sequential waterfall execution

Builder / Runtime Separation

The Builder produces configuration. The Runtime interprets it. This separation eliminates entire categories of production incidents.

  • Client applications evolve without redeployment — updates are instantaneous
  • Breaking production is structurally eliminated
  • Configuration changes are live immediately — no build step, no deploy pipeline
  • This is what separates Komposia from both vibe coding tools and traditional low-code

Multi-Tenant Architecture

One agency manages N clients. Each client manages N applications. Boundaries are yours to define.

  • Full isolation (tenantId + websiteId): each app is a data silo — zero leakage
  • Connected ecosystem (tenantId only): apps share data within the same client
  • Build complete application suites: CRM + portal + back-office, all connected
  • Configurable per website — switch between isolation modes from the Studio

Native Backend Operations

DB, auth, email, storage, webhooks — all are native pipeline operations. You configure them, you don't write endpoints.

  • All database operations as pipeline steps
  • Auth flows (sign-in, sign-up, MFA, password reset) as pipeline operators
  • Email sending, file uploads, PDF generation as pipeline steps
  • $callApi for custom external API integrations

You are no longer delivering websites

You become the durable technical architect of your clients' digital ecosystems. One agency, N clients, each with their own application suite — connected or isolated, boundaries you define. That is a fundamentally different value proposition.

Ready to get started?

Join us to build the future with Komposia.