Get Started
If an update fails, it fails safely
If a database migration or build step fails partway through, the deploy script backs out the change instead of leaving the running app half-updated and broken.
Combined with the automatic pre-update backup, a failed deploy is a non-event: the script's own rollback handles the immediate failure, and the backup is there as a second line of defense if something slips through.
None of this requires reading logs under pressure to figure out what state the server is in — the script is written to fail safely by default.
Deploy without betting the app on it going perfectly.
WTM is free and open source under AGPL-3.0. Self-host it with rollback built in from the start.
Get started