Products

Four places to run it. One set of tools.

kosa8 runs on your computer, on kosa8 Cloud, on your own servers or on a network with no way out. Wherever it runs you get the same sealed sandboxes you can rewind, plus a model runner, a dashboard, an approval gate and a signed policy engine.

Download See every command

Local: one binaryCloud: billed by the secondAir-gapped: no check-ins

everything, in one session

kosa8 sandbox create sealed --egress-allow api.anthropic.com
sandbox sealed ready in 584ms
 
kosa8 checkpoint sealed --label "before the risky bit"
checkpoint sealed-ckpt-1 (before the risky bit) saved in 697ms
 
kosa8 rewind sealed
sealed is back at sealed-ckpt-1 (485ms)
  processes resumed from just now

Run it

First pick where the sandbox runs.

The sandbox is the same in all four. What changes is whose hardware it is, who runs it, and what has to leave the building. Compare the four side by side.

Local

On your Mac, Linux or Windows computer, from the command line and the desktop app. A plan from $29 a month, 14 days free.

Your computer

kosa8 Cloud

Sandboxes and functions on our hosts, nothing installed. Sign in at cloud.kosa8.com with email and password, make an API key, pay by the second.

kosa8 Cloud

Your own hosts

Your Linux servers join your kosa8 Cloud organization through an outbound tunnel. Files stay on them; $0.20 an hour per host, no compute charge.

Bring your own

Air-gapped

On a network with no way out, licensed with a signed site licence checked locally. Enterprise and Government, on a quoted contract.

No network

The SDKs for Python, JavaScript, Go, Ruby and Java drive both: Kosa8 for the engine on your machine, Kosa8Cloud with an API key.

What you get

Each of these is a page, and each page shows it working.

Nothing below is a mockup. The terminals replay commands that were run against a real daemon, at roughly the speed the real thing takes.

Local models

Pull from Hugging Face, serve on your own GPU. OpenAI- and Claude-compatible.

Model runner

Sandboxes

A sealed machine per assistant. You name the folder and the hosts; the machine enforces it.

Your first sandbox

Save & undo

Checkpoint before the risky step, rewind in half a second with processes still running.

Checkpoint & rewind

Explore

Fork a machine per idea, run them at once, keep the one that worked.

Fork and compare

Functions

On kosa8 Cloud, code you call through the API, a web endpoint, a cron schedule or a batch. Each call runs in a fresh VM that is deleted afterwards.

Cloud guide

Dashboard

Every machine, every save point, and the tree of what was copied from what. Sign in with kosa8 Cloud from the app, with email and password.

Open the dashboard

Governance

Signed policy per team. Edit it on a laptop and that laptop locks itself out.

How policy works

Assistant

Shows you the exact command first. Destructive actions are always confirmed.

Meet the assistant

The idea

One machine you can copy, save and put back.

Everything else follows from that. A model runner is useful; a model runner inside something you can rewind is a different kind of safe.

01 The unit

A sandbox is a whole machine, not a process.

Its own kernel and its own network stack, booted in about half a second. That is what makes the rest possible: you cannot snapshot a namespace mid-thought, but you can snapshot a machine.

584msto boot a sealed machine

2 vCPU1024MiB, by default

Your first sandbox →

sealed

kosa8 sandbox create sealed --egress-allow api.anthropic.com
sandbox sealed ready in 584ms
 
kosa8 sandbox pull sealed alpine:latest
pulled docker.io/library/alpine:latest into sealed
 
kosa8 sandbox run sealed alpine sh -c 'wget -qO- https://example.com'
example.com: refused
  ↑ only api.anthropic.com was allowed out

02 The trick

Save it mid-thought. Put it back still running.

A checkpoint captures memory and running processes, not just the disk. Rewinding does not restart anything — the same processes carry on from the instant you saved them.

697msto save a whole machine

485msto put it back

Checkpoint and rewind →

undo

kosa8 checkpoint sealed --label "before the risky bit"
checkpoint sealed-ckpt-1 (before the risky bit) saved in 697ms
  rewind with `kosa8 rewind sealed`
 
kosa8 sandbox run sealed alpine sh -c 'echo damage done'
damage done
 
kosa8 rewind sealed
sealed is back at sealed-ckpt-1 (485ms)
  processes resumed from just now

03 The payoff

Try every approach at once, keep the one that worked.

Forking copies the machine, processes and all, so each idea starts from the same instant instead of from a fresh boot. They run in parallel and the losers are cleaned up for you.

3 branchesforked in 3.2 seconds

Fork and compare →

explore

kosa8 explore sealed --variant 'echo one' --variant 'false' --variant 'echo three'
forked 3 branches in 3258ms
BRANCH                     RESULT   TIME    VARIANT
 sealed-explore-712651     ok       275ms   echo one
 sealed-explore-712652     error    3ms     false
*sealed-explore-712653     ok       272ms   echo three
 
winner: sealed-explore-712653
other branches removed; --keep-all keeps them for inspection

Plans and products

Every product comes with a plan.

One subscription covers kosa8 on your own machines, on your own servers and on kosa8 Cloud. Pick the plan with the products you need; every plan starts with a 14-day trial.

Product	Solo$29	Pro$89	Team$169/person	Scale$199/person	Enterprisequoted
Sandboxes & secure agent runs	✓	✓	✓	✓	✓
Save & undo	✓	✓	✓	✓	✓
Dashboard	✓	✓	✓	✓	✓
Local models	✓	✓	✓	✓	✓
Explore	—	✓	✓	✓	✓
Assistant	—	✓	✓	✓	✓
Governance & MCP policies	—	—	✓	✓	✓
Compliance Pack	add-on	add-on	add-on	add-on	✓
kosa8 Cloud credit, each month	$10	$25	$40/person	$50/person	contract
Copies at once	4	16	48 shared	160 shared	unlimited
Sandbox size	64 GB	128 GB	256 GB	500 GB	any
Buy	Start free trial	Start free trial	Start free trial	Start free trial	Talk to us