✦
Fixed prices, you own the result

You tell us what you need.
We get it done.

XTen.Deploy designs, builds, deploys and supports custom business applications on XTen.Stack, the free, security-first PHP platform. Every build starts roughly 80% finished — so your budget goes on what makes your business different, and you own the result outright.

Fixed price from a costed spec
You own the code — no lock-in
PHP 8.3 · Phalcon 5.8 · PostgreSQL
Project Delivery
On track
$6.5k
Deploy Complete from
Fixed
100%
Code Ownership
MIT
$850
Modules from
Per spec
✦
UAT sign-off You accept it before it ships
Perth, WA
One senior point of contact
Delivered on a modern, boring-on-purpose stack
PHP 8.3
Phalcon 5.8
PostgreSQL
Docker
Composer
GitHub Actions
Caddy
MIT License
PHP 8.3
Phalcon 5.8
PostgreSQL
Docker
Composer
GitHub Actions
Caddy
MIT License

Security-first, by default
not by upgrade

Every Deploy engagement starts on XTen.Stack, so these are already built and tested before your first dollar is spent.

01 — Auth & RBAC

Role-gated from the first commit

Session-based login, role-gated controllers, and an API-key path for machine callers — seeded with sensible roles out of the box, not left for you to design from scratch.

✓
Admin, member, operator, agent roles seeded
✓
Every controller declares its role requirement explicitly
✓
API-key auth for machine/agent callers, session auth for people
Seeded Roles
4
Auth Paths
2
Role → Access
adminFull access
operatorScoped
member / agentSelf-service
02 — Reversible Audit Log

Undo a change,
not just see it

Opt-in per model, captures before/after values on every create/update/delete — and unlike a plain activity feed, a reversible entry can actually be reversed, non-destructively, with the original left untouched.

✓
One line to opt a model in (keepSnapshots)
✓
Before/after values captured automatically
✓
Non-destructive reversal — the original entry is never touched
Audit Log
Ticket #42 status → closedLogged
User role changedLogged
Ticket #41 closeReversed
Archival
Automatic
Reversible
Yes
03 — Module System

Add features
without forking core

Optional features ship as Composer packages with a manifest, discovered automatically and toggled per-instance from the admin Configuration page. Core application modules stay separate and can't be accidentally disabled.

✓
Composer-package discovery, no core edits required
✓
Enable/disable per instance from the admin UI
✓
Module-aware migrations, applied alongside core's own
Core Modules (always on)
backend · frontend · api · cli
Installed Packages
Your module hereEnabled
./run modules syncCLI-managed
0%
Head Start
Every build starts ~80% finished
0
Ways to Engage
Modules, complete builds, care plans
0%
Code Ownership
MIT-licensed platform core — no subscription, no lock-in. Add-on modules licensed separately; free modules may be MIT
0
Senior Point of Contact
A person, not a ticket queue

Fixed prices from a costed spec.
No surprises.

Every engagement starts with a requirements specification and a fixed quote per functional deliverable — you know the price before we write a line of code.

Care & Hosting
$ 75  –$150 / mo
per application

After delivery: we run it so you don't have to.

✓
Managed hosting and monitoring
✓
Nightly backups, verified restores
✓
Security patches applied for you
✓
Small content changes included
Talk to us
Deploy Module
$ 850  –$2,500 / module
 

One functional deliverable at a time — specced, quoted fixed, built, and accepted by you at UAT before it ships.

✓
Costed requirements spec first
✓
Fixed quote per deliverable
✓
UAT acceptance before delivery completes
✓
Ships into your repository — yours outright
Get a quote
Enterprise & Government
Custom
multiple deployments, one organisation

Several Stack applications across one organisation — quoted as a programme, not a pile of projects.

✓
Multi-instance provisioning and rollout
✓
Consolidated support and billing
✓
Security & compliance documentation for procurement
✓
Staged delivery, training and handover
Talk to us
XTen AI Sales and Support Agent
Custom
phone, email & chat — built and quoted per client

The same automated AI agent that answers our own line and inbox, configured for yours.

✓
Answers phone, email and website chat — one agent, three channels
✓
Closes fixed-price sales and logs a full audit trail automatically
✓
Bring your own numbers, mailbox and CRM — or we run the whole thing
✓
Always discloses it's AI, on every call and reply
Talk to us
Data Restore Audit · Health Check

Before you spend on hosting or a rebuild: has anyone ever actually restored your backup? A person checks your system against 46 published points, restores your most recent backup on a throwaway instance, and writes down what happened. A one-page summary and a prioritised 90-day plan, written so your own developer can act on it. No obligation afterwards.

$ 450  fixed
three business days · written report either way
See the 46 checks

Rather run it yourself? XTen.Stack is free to self-host, with optional support plans from $95/mo.

No outside case studies yet — we're our own first one

XTen.Deploy is new — we'd rather show you our own use than fake a customer list. Here's what an engagement actually gives you, proven on ourselves first.

Every build starts roughly 80% finished — auth, RBAC, audit logging with reversal, soft deletes, and a module system are already there. That's weeks of work you don't start from zero on, whether we host it, you host it, or your own IT team runs it. It's already running across four real environments of our own — local dev, an internal dev droplet, a test/staging instance, and production — not just a demo checkout.

The platform and your bespoke build are yours outright — the Stack core is MIT licensed, with no subscription required to keep using it and no vendor to get locked into. Paid add-on modules carry their own licence; free modules may be MIT.

Security defaults are on from the start: CSRF protection, RBAC, audit trails, soft deletes — not bolted on later or reserved for a higher tier.

We stood up a brand-new internal tool the same day we needed one — no droplet, no new database to provision, just php -S pointed at a Postgres database we already had running. A real gap in the base list-view surfaced along the way and was fixed that same afternoon, in the shared codebase every instance runs on.

A safety ladder, not a one-size-fits-all contract: start DIY-free, buy one module, or hand the whole thing over — and move between them as your needs change.

Built on tools you
already trust

No proprietary runtime, no exotic dependencies — a stack any competent PHP developer can pick up, plus a Composer-package module system for adding features without forking core.

PHP 8.3
Phalcon 5.8
PostgreSQL
Docker
Composer
GitHub Actions
Caddy
Let's Encrypt
RBAC
Reversible Audit Log
CSRF Protection
Soft Deletes
Cron Scheduler
JSON API
API-Key Auth
Module System

XTen.Register is a free, open directory of Australian businesses and practitioners — every listing ABN-verified against the ATO's own register. It's built on the same data pipeline behind XTen.Stack. Claim your free listing →

Questions,
answered

Can't find what you're looking for? Reach us at deploy@xten.au.

Every engagement starts with a requirements specification, costed per functional deliverable. You get a fixed quote before any code is written — the price only changes if the spec does, and that's a new quote you approve first, never a surprise on an invoice.
You do, outright. Your application lives in your own repository — the Stack platform core is MIT licensed and your bespoke code is handed over to you on final payment, with no proprietary format, no subscription needed to keep using it, and nothing stopping you from taking it to another developer tomorrow. Paid add-on modules from the catalogue are licensed per instance rather than MIT (free modules may be MIT-licensed).
Three, and you can move between them: XTen hosts and runs it for you (Care & Hosting, $75–$150/mo per application); your own IT team runs it and we hand over tested releases; or you self-host the free XTen.Stack platform entirely yourself.
You get a full export of your data and a complete handover of your repository — documented, not obfuscated. No exit fees, no held-hostage credentials. We'd rather earn the renewal than lock the door.
Security-first defaults, not add-ons: role-based access control, CSRF protection on every state-changing request, a reversible audit log, and soft deletes throughout. We're not going to claim a compliance certification we don't hold — ask us directly about your specific requirements.
It depends on the spec, and the quote tells you honestly — individual modules are typically weeks, not months, because every build starts on a platform that's already ~80% finished. The timeline is part of the fixed quote, and you'll hear about any risk to it before it's a problem, not after.
An AI Sales and Support Agent — it's literally the same system that answers XTen's own phone line and inbox today, reconfigured to answer yours. You can bring your own phone number, mailbox and CRM and we just configure it, or we can run the whole thing for you. Because it's tailored to your own systems and volume, it's quoted per client rather than a fixed monthly price.
✦ Start Today

Have something that
needs building?

Tell us what you need. You'll get a costed spec, a fixed quote — and you'll own what we build.