S3 object storageyou runyourself.

Enterprise object storage for your own data center: a full S3 API, erasure coding, and automatic healing, plus per-division quotas, usage metering, verifiable audit, offline licensing, and one console for every cluster.

7-day trial on 1 node, installed by our team in your data center

Vaultanesia console dashboard: cluster jkt-dc1 with 4 of 4 nodes reachable, 46 percent capacity used, a 24-hour usage chart, and an empty needs-action list.Vaultanesia console dashboard: cluster jkt-dc1 with 4 of 4 nodes reachable, 46 percent capacity used, a 24-hour usage chart, and an empty needs-action list.

Erasure coding RS(16,12): data survives a full node failure

Every object is split into 12 data shards and 4 parity shards across 4 nodes × 4 disks. When a node goes down, any 12 shards still rebuild the whole object.

  1. One object arrives

    Your client sends a PUT exactly as it would to AWS S3. No special SDK.

  2. Split into 12 data shards

    The object is cut per 1 MiB block into equally sized data shards.

  3. Plus 4 parity shards

    Reed–Solomon computes parity. This setup is RS(16,12): 12 data, 4 parity.

  4. Spread over 4 nodes × 4 disks

    Every shard lands on a different disk; no two shards share a disk.

  5. A node dies

    Four shards vanish at once. Any twelve shards are enough to read the whole object.

  6. Automatic heal

    When a replacement node or disk comes online, missing shards are recomputed and written back.

Multi-tenancy, metering, and audit are built in

No extra operators or scripts. Everything ships and is supported together with the data plane.

Tenants page in the console: four company divisions, each with its own capacity quota.Tenants page in the console: four company divisions, each with its own capacity quota.

A tenant per division, with quotas and metering

Separate divisions, subsidiaries, or applications as tenants with their own capacity, bucket, user, and request-rate quotas. Usage is sampled every 5 minutes, aggregated daily and monthly, and can be reconciled at any time for reporting and internal chargeback.

  • Hard quotas and warning thresholds per division
  • 5-minute samples, daily and monthly aggregates
  • REST for your reporting system
  1. Full S3

    Versioning, Object Lock, SSE-S3/KMS/C, presigned URLs, multipart, lifecycle, notifications, replication, STS.

  2. Offline licensing

    Ed25519-signed license files for air-gapped data centers. When expired: 30-day grace, then read-only; reads are never locked.

  3. One console, many clusters

    IAM, buckets, lifecycle, replication, alerts, support bundles, and metering in one place, with RBAC and MFA.

  4. Operational resilience

    Offline disks detected within seconds, replacement disks formatted and healed automatically, buckets stay readable when metadata quorum is lost.

  5. Alerts where your team is

    Disk, quorum, capacity, license, and tenant quota alerts to webhooks, Slack, Teams, Telegram, or email.

  6. Verifiable audit

    Hash-chained daily audit logs; integrity is checked with a single command.

Benchmarks with the methodology published

The benchmark harness, raw data, and client matrix live in the product repository, so you can rerun them on your hardware.

Throughput vs MinIO, equal durability

Chart source data
OperationRatioVaultanesia vs MinIO
PUT 1 MiB96%195 vs 203 MB/s
GET 1 MiB116%519 vs 448 MB/s
PUT 4 KiB186%2,782 vs 1,494 ops/s
GET 4 KiB126%6,655 vs 5,288 ops/s
LIST 1000343%360 vs 105 ops/s

Single node, single disk, Docker volume, neither system fsyncing per object, 32 workers × 15 seconds, Apple M1 Pro laptop. Not production hardware: the ratio is what matters. With per-shard fsync (Vaultanesia's default), PUT 1 MiB is 79% of MinIO without fsync. Request the raw data

S3 clients tested every release

ClientMake bucketSmall PUTMultipartGET + MD5HEADLISTCOPYPresignVersionsTagsDELETE
AWS CLI 2.38.1passedpassedpassedpassedpassedpassedpassedpassedpassedpassedpassed
boto3 1.43.114passedpassedpassedpassedpassedpassedpassedpassedpassedpassedpassed
AWS SDK JS 3.115passedpassedpassedpassedpassedpassedpassedpassedpassedpassedpassed
AWS SDK Go v2passedpassedpassedpassedpassedpassedpassedpassedpassedpassedpassed
rclone 1.75.2passedpassedpassedpassedpassedpassedpassedpassednot supported by clientnot supported by clientpassed
s3cmd 2.4.0passedpassedpassedpassedpassedpassedpassedpassednot supported by clientnot supported by clientpassed

– = the client does not support that feature. Run automatically by the client matrix in CI.

ceph/s3-tests: 342 of 348 passing. The rest are Ceph RGW-specific and torrent features. See known differences from AWS

The data plane keeps serving when the control plane is down

Storage nodes do not depend on the console. If the control plane goes down, your applications keep reading and writing.

Your apps → Load balancer → 4 × Node (4 disks, Raft metadata); Operators & team → Console → Admin gRPC → Node; Console → PostgresYour appsAny S3 SDKLoad balancerS3 · HTTPSNode 1vaultanesiad4 disks · Raft metadataNode 2vaultanesiad4 disks · Raft metadataNode 3vaultanesiad4 disks · Raft metadataNode 4vaultanesiad4 disks · Raft metadataOperators & teamConsoleRBAC · MFAAdmin gRPCPostgres
Scroll sideways to see all four nodes.

Data plane vaultanesiad

A Go binary with no runtime dependencies: S3 API, Reed–Solomon erasure coding, Raft metadata on Pebble, healing, scrubber, lifecycle, replication, encryption, notifications.

Control plane console

Admin console with RBAC and MFA, tenants, metering, alerting, licensing, and encrypted support bundles; connects to many clusters over Admin gRPC.

Deployed by our team in your data center

There are no binaries to download. The Vaultanesia team handles installation, the trial, and migration together with your infrastructure team.

  1. Requirements assessment

    Capacity, node count, networking, and security policy are mapped together with your infrastructure team.

  2. Installed by our team

    We install the cluster on your hardware or Kubernetes, on site or remotely, including the console and alerting.

  3. 7-day trial on 1 node

    Your applications try the S3 API, tenants, and metering on your own data before you decide.

  4. Migration from legacy S3

    Data moves from MinIO, Ceph, AWS S3, or any other S3-compatible system: checksum-verified bulk copy, delta syncs, then a scheduled cut-over.

  5. Enterprise license and support

    A license file is applied to the same cluster without reinstalling; support runs per contract.

Request a 7-day trial

Priced per TiB and per node

Annual licenses include updates and support. Final rates are agreed according to scale.

Trial

7 days

at first install

For evaluating in your own environment.

  • 1 node
  • Every S3 and console feature
  • Installed by our team
  • Guidance during the trial
Request trial

For production

Enterprise

Per TiB + per node

annual license

For production in your data center.

  • Capacity and nodes per license
  • Multi-tenancy, metering, alerting
  • Guided migration from legacy S3 systems
  • Support with contractual SLA
  • Offline (air-gapped) activation
Request a quote

Compare plans

FAQ

Is it really S3-compatible?

Yes, for the APIs applications commonly use. Every release is tested with ceph/s3-tests (342 of 348 passing) and six popular clients. Known differences from AWS, such as SelectObjectContent, are documented openly.

How do we migrate from a legacy S3 system (MinIO, Ceph, AWS S3)?

Our team plans and runs the migration with you from any S3-compatible system: an inventory of buckets and policies, a bulk copy with rclone or aws s3 sync (both in the tested client matrix) with checksum verification, repeated delta syncs while the old system still takes writes, then an endpoint cut-over in a window you choose.

Is any data or telemetry sent outside my data center?

No. Licenses are verified offline from a signed file. Activation through a license server is optional for internet-connected environments.

What happens when the license expires?

The cluster enters a 30-day grace period with warnings in the console. After that it becomes read-only: data is never deleted and reads are never locked.

Does Vaultanesia use MinIO code?

No. Vaultanesia is built from scratch (clean-room) and only uses permissively licensed dependencies: MIT, BSD, Apache-2.0, and MPL-2.0.

What hardware do I need?

For production, at least 4 nodes with several data disks (xfs recommended) and NVMe for metadata. For a trial, one node with four disks is enough. Our team sizes the hardware with you during the assessment.

Who provides support?

The Vaultanesia team in Indonesia, in Indonesian or English. Encrypted support bundles from the console speed up diagnosis without opening access to your data.

Start with a 7-day trial on one node

Our team installs a 7-day trial on 1 node in your data center, with every S3 and console feature. The enterprise license is applied to the same cluster without reinstalling.