FosterStack
FosterStack is a self-hosted remote build cache server intended as a replacement for Develocity Build Cache Node.
What FosterStack is
FosterStack is a self-hosted remote build cache server intended as a replacement for Develocity Build Cache Node. It supports Gradle and the Apache Maven Build Cache Extension remote HTTP mode, with Maven acceptance coverage still in progress. Size-capped LRU eviction makes room for new cache entries. Authentication uses HTTP Basic Auth over TLS, with constant-time credential comparison and no credential logging. Prometheus metrics and a read-only status page show hit rates and cache size against its cap.
The server can run from a Docker image or as a static binary. Release binaries are available for Linux and macOS on amd64 and arm64; Windows is not built or planned. Its core is MIT-licensed, releases include signed artifacts and SLSA provenance, and security patches are included in the free tier. The maker says the free core makes no outbound connections and collects no telemetry or usage data. FosterStack identifies the product as v0.1 and says no one outside its own work is yet running it in a production build pipeline. Paid tiers are described but not yet available.
Good
- Free plan includes the full self-hosted cache server.
- Core is MIT-licensed.
- Supports Gradle and Maven remote cache use.
- Offers Linux and macOS release binaries.
- Free tier includes security patches.
Watch out
- Product is identified as v0.1.
- No external production use is reported by the maker.
- Windows is not built or planned.
- Paid tiers are not yet available.
Who it suits
FosterStack is aimed at Gradle or Maven teams seeking a self-hosted replacement for the discontinued standalone Develocity Build Cache Node. It suits teams able to deploy and manage a cache server themselves.
Verdict
FosterStack offers a self-hosted cache server with Gradle support, Maven support in progress, and a free MIT-licensed core. Its early maturity and unavailable paid tiers are important considerations.
Plans and prices
From FosterStack's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | Full self-hosted cache server · MIT-licensed · security patches and -fips image included |
| Team | $49 a month | Multi-user access control · SSO (OIDC) · per-project usage analytics · email support (1-business-day target) · described, not yet available |
| Business | $199 a month | Everything in Team · HA/replication · priority support with CVE-response target · described, not yet available |
| Compliance | $499 a year | Everything in Business · FIPS 140-3 applicability statement · signed per-release attestation letters · security-questionnaire support up to 8 hours per year (async) · named-version LTS · described, not yet available · billed annually |
The facts
Each one read from FosterStack's own pages, with the date it was checked.
What it does
- Authentication
- It supports HTTP Basic Auth over TLS, with constant-time credential comparison and no credential logging.checked 3 Oct 2026
- Build tools
- It supports Gradle and implements the Apache Maven Build Cache Extension remote HTTP mode, with Maven acceptance coverage in progress.checked 3 Oct 2026
- Cache management
- The server provides size-capped LRU eviction to make room for new entries.checked 3 Oct 2026
- Compliance
- FosterStack says it is not FedRAMP or CMMC compliant; its published evidence and validated crypto are intended to support a customer's compliance program.checked 3 Oct 2026
- Deployment
- The product is self-hosted and can be run from a Docker image or as a static binary.checked 3 Oct 2026
- Intended users
- The product is aimed at teams using Gradle or Maven that want a self-hosted replacement for the discontinued standalone Develocity Build Cache Node.checked 3 Oct 2026
- Maturity
- The maker identifies the product as v0.1 and says nobody outside its own work is yet running it in a production build pipeline.checked 3 Oct 2026
- Metrics
- It exposes Prometheus metrics and provides a read-only status page with hit rates and cache size versus cap.checked 3 Oct 2026
- Operating systems
- Release binaries are available for Linux amd64 and arm64 and macOS amd64 and arm64; Windows is not built or planned.checked 3 Oct 2026
- Privacy
- The maker says the free core makes no outbound connections and collects no telemetry or usage data.checked 3 Oct 2026
- Product
- FosterStack is a self-hosted remote build cache server intended as a replacement for Develocity Build Cache Node.checked 3 Oct 2026
- Security
- The core is MIT-licensed, releases include signed artifacts and SLSA provenance, and security patches are included in the free tier.checked 3 Oct 2026
- Support
- Bugs and questions can be reported through GitHub issues; the listed paid tiers describe email and priority support but are not yet available.checked 3 Oct 2026
