Docker is not isolation.
Containers share one Linux kernel. Your neighbour's bug becomes your bug. The container escapes are documented and public — runc CVE-2024-21626 (“Leaky Vessels”) is the standing reminder.
Your agent fleet in the cloud — each in its own secure microVM, your keys, always on. Your laptop stays closed. From $21/mo billed yearly.Run a whole fleet in the cloud — Claude Code, Codex, OpenClaw, Hermes and more — each in its own secure Firecracker microVM, your keys inside, running 24/7. Your laptop stays closed: set one up, run it around the clock with a terminal, files, and scheduled loops — then templatize it and share it. From $21/mo billed yearly.
$ curl -fsSL https://jurniti.com/install.sh | shThe category default for managed AI agents is a Docker container with a friendlier dashboard. That stops being acceptable the moment your agent has the keys — this spring a single internet scan engine indexed more than 180,000 exposed agent instances.
Containers share one Linux kernel. Your neighbour's bug becomes your bug. The container escapes are documented and public — runc CVE-2024-21626 (“Leaky Vessels”) is the standing reminder.
Most platforms proxy your model spend through their account. Lock-in by design + vendor markup on every token. You don't own the relationship with your provider.
DIY agent infra means a box, firewall ports, TLS, persistent volumes, systemd units, log forwarding. Then you get to install the agent. A managed agent shouldn't ask you to be a sysadmin first.
19 open-source agent runtimes — from Claude Code and Codex to Hermes and OpenClaw — each in its own KVM-isolated microVM with your own keys. Pick one to start; add more later, each in its own VM, billed at its plan's rate.
Choose public templates or private workflows. jurniti creates isolated workers, dispatches concurrently, and collects every result into ./out. Spot pricing makes a fleet pizza money, not payroll.
One agent fails confidently. Fan the same ranking brief across fifty isolated workers — titles, metas, internal links — then keep the fixes that hold up in ./out.
One Firecracker microVM per tenant — the same KVM hardware boundary AWS uses for Lambda, on nested-virt EC2 in us-west-2. Which means your keys, your disk, and your blast radius stay yours.
KVM hardware boundary per tenant. The same primitive AWS uses for Lambda. 124ms boot.
OpenRouter, OpenAI, Anthropic, Nous Portal. Paste once, lives only inside your VM.
Cancel within 30 days for a full refund. Manual processing within one business day.
you.jurniti.com with valid TLS, ready when the VM boots. Pro and Max plans.
We ship uv and the upstream install script; you control which Hermes version lands.
/var/lib/jurniti/persist survives restarts and re-provisions. Daily snapshot on Max.
Most agents wake up empty every session. jurniti Memory is a dedicated microVM that holds long-term knowledge, then plugs into any agent over MCP. The memory stays in your tenant. The agent just gets smarter.
Markdown notes the agent can read and write. Portable, offline-friendly, zero model key to start.
A self-wiring knowledge graph. Ingest notes once; the agent gets a second brain that compounds.
Vector recall that actually finds what happened last week. Add your model key when you're ready for Pro memory.
Buy a memory once. Grant it to one agent or many. Sign in to provision — same Firecracker isolation as your agents, from $19/mo.
When an agent fails mid-tool-call, the answer is not another SSH session. jurniti Observability is a self-hosted sidecar in its own microVM — Latitude or Langfuse — so sessions, tool calls, and multi-turn paths stay on your tenant. Same isolation model as agents and Memory.
Agent-native traces, signals, and session trajectories. MIT, OTEL ingest, full UI in your microVM.
The open-source default for LLM observability. Sessions, scores, and datasets — data residency you control.
Not a shared SaaS black box. A sidecar you own.
One observability engine. Many agents. Buy a sidecar, grant it from the agent VM page, and the platform injects OTEL export config — traces stay in your box. Cloud-only vendors stay off the menu on purpose.
After sign-in, open Observability in the dashboard to add an engine, then attach it from any agent — same pattern as Memory.
Run inside the microVM you provisioned. We don't pre-install Hermes — you control the version, the upstream installer is one curl away.
# Boot one tenant microVM
$ hermes config set OPENROUTER_API_KEY sk-or-v1-...
$ hermes dashboard --host 0.0.0.0 --port 9119
# 124ms later …
→ tenant.you.jurniti.com · KVM-isolated
One binary drives everything — provision, billing, VMs, templates — and doubles as an MCP server for your own agent.
$ curl -fsSL https://jurniti.com/install.sh | shThen, three commands to first agent
1. jurniti loginauthenticate this machine
2. jurniti billing add-cardattach a payment method
3. jurniti upprovision + boot your agent VM
4. jurniti auth <vm>add your model key, or sign in with --login
irm https://jurniti.com/install.ps1 | iexEvery plan is the full platform — BYOK, no feature gates. Annual prepay gets 2 months free.
$250 billed once a year — 2 months free
Solo builders running Pi or Hermes 8B with a local proxy. Just enough to keep your agent's home alive 24/7.
1 vCPU · 2 GiB RAM · 10 GiB SSD · 100 Mbit/s burst
$490 billed once a year — 2 months free
The default. Headroom for Hermes-3-8B at Q4, OpenClaw with a heavy plugin set, or a Pi instance you actually live in.
2 vCPU · 6 GiB RAM · 50 GiB SSD · 200 Mbit/s burst
$990 billed once a year — 2 months free
For agents you'd cry about losing. Daily snapshots, room for a 12 GiB working set, and the headroom to keep multiple skills warm.
4 vCPU · 12 GiB RAM · 100 GiB SSD · 500 Mbit/s burst
Don't need always-on? Pay by the hour with prepaid credits.
Never interrupted while running.
Metered per second while running · Starter sizing
Bursty and part-time agents. Run for an afternoon, stop, pay for exactly the hours you used.
Half the rate — can be interrupted.
Metered per second while running · Starter sizing
Interruption-tolerant work — batch runs, experiments, agents that checkpoint their own progress.
From $21/mo billed yearly — or $25/mo. BYOK. 30-day money-back, refunds processed in one business day. Live in about three minutes.
Annual · $250/yr · 2 months free · talk to us
A GitHub for agent behavior — fork someone's working agent into a microVM of your own, seeded with the creator's configuration. New $25+/mo subscription per fork.
Claude Code · starter
AI vulnerability scanner / AI SAST on Claude Code: Block CodeCrucible, dry-run cost gate, SARIF out. You verify findings — nothing auto-merges.
Hermes Agent · starter
Ads dashboard with a budget gate: drafts hooks and CTAs to an Obsidian board you own, sets break-even ROAS before a dollar of spend. One channel, mastered.
Claude Code · starter
Turn the listings you already have into search traffic. Paste one (or drop your shop CSV) and get keyword research, a retitled draft, and all 13 tags — as drafts you apply yourself. Nothing ever touches your shop.
Claude Code · starter
Weekly Stripe revenue and churn analysis, posted to Slack. Fork it, paste a read-only key, type /pulse: MRR, what churned, who gave notice, whose card is failing. Every figure is sourced — and a checker blocks the post if the agent invents one.
OpenClaw · starter
Postiz social media scheduler run by OpenClaw: say what to post and when, and it drafts, queues, and publishes to 28+ channels from one calendar. BYOK.
Codex CLI · starter
AI tutor on Codex that teaches any topic adaptively, then writes an interactive HTML lesson you keep forever. Worked example, quiz, one file. BYOK.