HeroCtl is a self-hosted container orchestrator distributed as a single binary. It brings up a high-availability cluster with replicated control plane in three commands, with built-in router, automatic Let's Encrypt certificates, and native service-to-service encryption. A direct alternative to Kubernetes (without the operational overhead), Heroku (without vendor lock-in), and panels like Coolify/Dokploy (with real high availability, not single-server). Ideal range: 1 to 500 servers. Audience: platform teams and senior developers in B2B SaaS who need to deliver contractual SLAs without keeping two SREs full-time. Community plan is free forever with no feature gates, no phone-home, no kill-switch. Business plan adds SSO/SAML, granular RBAC, detailed audit logs, and SLA-backed support. Enterprise plan adds source-code escrow and 24x7 dedicated support.