Banks, hospitals, defence and government teams want AI agents too, but their networks can't call out to a cloud sandbox, and the agents can't hold real credentials.
We've been building kosa8 for exactly this: every agent gets its own microVM with its own kernel, the network is closed by default, keys stay on the host, and it runs fully air-gapped. We published a technical report on how we tested it: kosa8.com/research
Before we launch on Product Hunt on Nov 3, we'd love to hear from people working in closed environments:
What kinds of agents are you running or blocked from running (support, data, document, SOC, coding)?
What does your security team need to see before an agent can run unattended?
How do you handle model access and updates when nothing can leave the networ?
@rohanrecommends @Rohan Chaubey Tamper-evident audit log , how kosa8 performs audit
@thisiskp_ AI agents now act on their own, but regulated teams can't let them run without containment and proof. kosa8 gives them both: - Sealed: every agent gets its own microVM and sees only one folder.
- No secrets inside: real keys stay on the host, and the network only reaches sites you allow.
- Safe tools: MCP servers plug in unchanged, each sealed, with allow/deny/ask rules.
- Undo and branch: rewind a running machine in about half a second, or fork it into 100 live copies in 2.5 seconds.
- Proof: a tamper-evident audit log, plus FIPS 140-3 builds.
- Runs anywhere: on your laptop, on-prem, air-gapped or on your own cloud servers (BYOC), with kosa8 Cloud coming soon.
- Fits your stack: Docker-compatible, with SDKs in Python, TypeScript, Go, Ruby and Java.
@abilalzengin @harini_mukesh @thamibenjelloun
@ravibits congtas on ur AgentKit ..kosa8 making sure safest of Agents ...Agentkit
@yang_zhang21kosa8 can def. provide Wanaka Studio a safer agentic experience to develop..support each other
The checkpoint and rewind feature sounds especially useful. Excited to see where kosa8 goes!
@thisiskp_ @mituhin