Launching today

kosa8
Secure infrastructure for AI agents
4 followers
Secure infrastructure for AI agents
4 followers
Every AI agent gets its own sealed machine on your computer. Save it, copy it, and rewind it in about a second when the agent gets it wrong. Fully Air gaped The network stays closed except the hosts you allow, and your API keys never enter the sandbox.











Free Options
Launch Team / Built With

AWS Startup AdvisorPersonalized AWS guidance that meets you where you’re already building
Promoted



Hi Product Hunt, I'm Drew, the maker of kosa8.
I started kosa8 at the end of July to answer one question: can a coding agent run unsupervised on a laptop without putting the laptop at risk? Containers share your kernel, and snapshotting or forking a live machine only existed as a cloud service. I've built it solo since then, with Claude Code as my pair: 26 releases in three months.
AI coding agents now run with your shell, your SSH keys and your cloud credentials. One poisoned package or one injected instruction can reach all of it.
kosa8 gives every agent its own sealed machine: a microVM with its own kernel, on your own computer.
🔒 The network is closed except the hosts you allow. API keys stay on your computer; the sandbox only holds a placeholder.
⏪ Save a checkpoint before the risky step, and rewind the whole machine, running processes included, in about a second.
🌱 Fork a running machine into eight live copies, try eight fixes at once, and keep the one that passes.
✋ Risky actions wait for one or two named people to approve them.
🧾 Every action is hash-chained and marked as human or agent.
It is Docker-compatible, ships an MCP server with 30 tools and a Claude Code plugin, and runs local models. A container is running in 178 ms. Today's release is v0.11.0, signed and notarized.
Install: curl -fsSL https://kosa8.com/install.sh | sh
It's free for 14 days with no account and no card. After that, plans start at $29 a month; there is no permanent free tier.
I'd value your honest feedback: what would you let an agent do if you could rewind it in a second?