Where kosa8 runs

One sandbox, four places to run it.

Every kosa8 sandbox is a sealed microVM with its own kernel. Where it runs is your choice: on your own computer, on our cloud, on your own servers managed from our dashboard, or on a network with no connection to the outside at all. The more you keep, the less leaves your building.

Who runs what, in each of the four ways to run kosa8 Four columns, left to right: air-gapped, local, your own hosts, and kosa8 Cloud. Each has the same sandbox on top. Below it, three layers: the hardware, the control plane and the network it needs. Air-gapped: your hardware, you run it, no network. Local: your hardware, you run it, a licence check. Your own hosts: your hardware, kosa8 runs the control plane, an outbound tunnel. kosa8 Cloud: kosa8's hardware, kosa8 runs it, over the internet. everything stays with you kosa8 runs more of it your hardware you run it no network Air-gappedEnterprise & Government your computer you run it a licence check LocalMac, Linux, Windows your servers kosa8 runs control an outbound tunnel Your own hostsBYOC, from the dashboard kosa8's hardware kosa8 runs it the internet kosa8 Cloudcloud.kosa8.com
yourskosa8'sThe sandbox on top is the same in all four.

The four, in detail

Pick by where your code may go.

01

Local

On your own computer, with the command line and the desktop app.

For
A developer or a team running AI agents on their own machines.
Runs on
Apple-silicon Macs and x86-64 Linux; Windows 11 on x86-64 through WSL2 (preview).
Your code and data
Stay on your computer.
What leaves
The licence check, and for billing a count of how many copies ran. Never what is inside a sandbox.
You pay
A plan: Solo $29, Pro $89 a month, Team $169 or Scale $199 a person a month. 14 days free, no card.
02

kosa8 Cloud

On our hosts, from an API key. Nothing to install.

For
Code that runs where kosa8 is not installed (a server, a CI job, a hosted agent), or many sandboxes at once without a big machine of your own.
Runs on
kosa8's hosts, in the EU (Helsinki) today. Kept warm, so a new sandbox is ready in about a second.
Your code and data
On kosa8's hosts, in sandboxes only your organization can reach.
What leaves
What you send to the sandbox: it runs on our hardware.
You pay
Every plan includes Cloud credit each month ($10 to $50). Past it, or with no plan, it is billed per second: $0.048 per vCPU-hour and $0.0154 per GB of RAM per hour, in the EU (Helsinki). A sleeping sandbox pays $0.08 per GB-month. $50 of credit once you add a payment method.
03

Your own hosts

Your servers, joined to your kosa8 Cloud organization. Bring your own cloud.

For
Teams whose data has to stay on their own servers, who still want the dashboard, API keys, SSO and SDKs of kosa8 Cloud.
Runs on
Your Linux servers with KVM (bare metal, or a VM with /dev/kvm, Ubuntu 24.04). Only your organization's sandboxes run on them.
Your code and data
Files and memory stay on your servers. Commands and their output pass through api.kosa8.com, which places, signs and meters each sandbox.
What leaves
Control traffic, through a tunnel your server opens outward. The host's own API listens only on loopback.
You pay
No compute charge: $0.20 per hour for each registered host. Placement can use your hosts first and ours when they are full, or yours only.
04

Air-gapped

On a network with no way out. Enterprise and Government.

For
Classified, regulated and disconnected sites, where nothing may call home.
Runs on
Your machines, installed from a bundle that fetches nothing. With KOSA8_OFFLINE=1, any outbound call is refused at once instead of hanging.
Your code and data
Never leave the building.
What leaves
Nothing. A signed site licence is checked locally: no activation, no check-ins, no usage reports.
You pay
A quoted contract: unlimited copies, every product, FIPS 140-3 builds from a private, signed release channel.

At a glance

Side by side.

Localkosa8 CloudYour own hostsAir-gapped
Hardwareyour computerkosa8'syour serversyours
Runs ityoukosa8kosa8 places, you hostyou
Network neededa licence checkthe internetan outbound tunnelnone
Files and memoryyour computerkosa8's hostsyour serversyour site
Pricefrom $29 a monthincluded in every plan, then per second from $0.048 per vCPU-hour$0.20 per host-hourquoted
Startdownloadsign upadd a hostcontact@kosa8.com

The same SDKs (Python, JavaScript, Go, Ruby and Java) drive a local engine and kosa8 Cloud: Kosa8 for the engine on your machine, Kosa8Cloud with an API key for the cloud.

Start where you are.

Try it on your own computer for 14 days, or sign up for the cloud and run your first sandbox in a minute.