Secure by construction

An agent can only do what its file grants. It runs in a sandbox that holds a copy of its folder and nothing else, on a network that reaches the public internet and only that.

Read the docs Get early access

rival-watcher

tools: [read, serp_check]

files: its own folder, nothing else

public internetreachedblocked

10.0.0.0/8 · privatereachedblocked

169.254.169.254 · metadatareachedblocked

the platform's own APIreachedblocked

The public internet, and only that. Whatever the agent is told.

One step, one sandbox, destroyed when it ends

Private networks and cloud metadata are unreachable

Secrets go to scripts as environment variables, never to the model

A tool not granted cannot be used, whatever the agent is told

Runs in the cloud Any model, your key Schedules and triggers Approval gates Budgets, not timeouts Git is the deploy Memory that survives Every run on the record Unlimited seats