Compute: $0.015 per GiB-hour (approximately $0.000004167 per GiB-second, billed by the second). Storage: $0.02 per GiB-month for retained incremental RootFS data and memory checkpoints. Network ingress and egress currently free. Object-store GET and PUT requests free. New users receive $5 free credi
Key features
X.509 certificate issuance via AWS KMS with private keys stored in HSM
Real-time behavioral monitoring and drift detection across eight risk dimensions
Content-risk scoring of agent outputs per EU AI Act Article 5
Automatic certificate revocation when risk crosses 0.85 threshold within 60 seconds
Compliance reports mapped to NIST AI RMF, NIST CSF 2.0, ISO 27001, MiCA, and EU AI Act
Public verification endpoint with sub-500ms response and no authentication required
OpenTelemetry (OTLP) export to Datadog, Grafana, Honeycomb, and Splunk
RFC 8693 delegation chains and signed forensics
Webhook event delivery with HMAC signatures and audit logging
AgentMail: verifiable email inbox per certified agent for regulatory communication
Automatic filesystem growth as storage fills
Pause compute without losing work or paying compute charges
Resume to same environment on demand
Access files while paused without waking compute
Public HTTP services with auto-resume capability
Command-line interface (s0 CLI) for agent-native workflows
Incremental checkpoints to avoid full filesystem copies
Scoped API keys and team-based access controls
On-demand file reads without downloading entire filesystem
What makes it different
Only platform that issues cryptographic identity to deployed agents, monitors behavior in real time, and generates compliance reports as one unified product
X.509 certificates provide institutional trust standard used by banks and governments for 30+ years
Auto-revocation with sub-60-second SLA stops misbehaving agents without manual intervention
Content-risk scoring evaluates agent output language, not just actions, catching prompt injections and policy violations
Private keys never accessible; stored only in AWS KMS with cryptographic signing performed by KMS directly
Persistent filesystem across pause/resume without duplicating data
Pay only for compute time used; paused sandboxes have zero compute charges
Automatic filesystem growth so agents can install and persist unlimited tools
Kakunin