Isolated by default

Secure computers for everyone

01

Web development

VMs booting in seconds.

  • Root access, real ports, no container gymnastics
  • Keep a machine per project instead of one tangled laptop
  • Share your creations as a simple link
  • Let your agent full access without worrying about getting compromised
  • Clone private repos without having any keys on the VM

02

Malware analysis

Run arbitrary apps, and watch what they reache for

  • Isolated at the hardware boundary, not by a sandbox flag
  • Network traffic inspected and logged while you work
  • Destroy it the second you're done — nothing persists

03

Sandboxed evaluation

Let your agent run the code it just wrote.

  • A clean machine per run, booted in seconds
  • Drive it from your own harness over the API
  • No blast radius beyond the box it ran in

04

Demos

Build live interactive demos directly on the cloud

  • Sharing presentations is as easy as sharing a link
  • Works from a browser, accessible to everyone

05

Desktops

A full Linux desktop in a browser tab.

  • Useful when the work needs a GUI
  • Reach it from any device
  • Suspend it and pick up exactly where you left off
  • Files and installed software stay on the machine

06

Anything else

It's a computer with an internet connection and nothing in your way.

  • Bring your own image, or start from ours
  • Scale the CPU and memory to the job
  • Boots in seconds
  • Allowed:deb.debian.org
  • Allowed:your own network
  • Blocked:github.com
  • Blocked:everything else

Network

Decide what gets in

A machine talks to nothing until you say so.

  • Allow a domain, a network, or nothing at all
  • Every attempt is logged, allowed or blocked
  • Change the rules while the machine keeps running
yours own kernel
someone else own kernel
someone else own kernel
kvmisolation in hardware
Physical server

Isolation

Secure and Isolated

Your machine is a real VM with its own kernel.

  • Kernel and memory isolation, enforced by KVM
  • No shared filesystem, no shared processes
  • Deleting the machine deletes the disk with it