Latest release v2026.722.0 is live (July 22, 2026).

See what's new
Product · Security

Autonomy with a blast radius you set

Agents move fast; the damage they can do stays bounded. Runs can execute in an isolation sandbox you configure, secret references resolve only for the run that needs them, and the control plane sits on infrastructure you own.

Sandboxedexecution via providers you configure
Scopedsecret refs resolved per run at runtime
Open SourceControl plane on infrastructure you own
Sandboxed execution

Runs you can lock down

Agents don’t have to run loose on your box. Agorid supports isolated execution workspaces, and projects can choose new, reused, or default workspace behavior. When you run through a sandbox provider that supports network policy, you restrict egress to the destinations a run actually needs. Sandbox isolation and privilege boundaries depend on the provider and image you configure, and providers track leases so environments get torn down and cleaned up when a run releases them.

  • Isolated execution workspaces, with new, reused, or default behavior per project
  • Restrict egress to the destinations a run needs, on providers that support network policy
  • Sandbox isolation and privilege boundaries set by the provider and image you configure
Read the sandbox reference→
Secrets & permissions

Credentials scoped, permissions explicit

Secret references can bind to agents, projects, routines, and environment configs; the server resolves them when dispatching a run. User-scoped values stay private to their owner — even admins cannot see them. On the human side, company roles plus explicit grants decide who can assign work, manage members, or just watch.

  • Secret references bind to agents, projects, routines, or environments — resolved at dispatch
  • User-scoped values stay private to their owner and are never shown back, even to admins
  • Company roles plus explicit grants gate who can act; owner and admin get broad access, viewer none, and assignment can be delegated
See secret scopes→
Your infrastructure

It runs on your servers, not ours

Agorid runs platform-hosted: you run the instance on your own machines or cloud, with your own model-provider keys. Choose a deployment mode by exposure — localhost for personal installs, a private Tailscale/VPN network for teams, or an authenticated public service. Because you host it, you govern the data path.

  • Deploy as needed — localhost, private network, or authenticated public mode
  • Bring your own model-provider keys; rotate them on your own schedule
  • Your tasks and threads live in your deployment; secrets stay in your configured host or secret provider
Deployment modes→

“The point of self-hosting is that the honest answer to "where does our data go" is: nowhere it wasn’t already. You run it on the platform, with the sandbox providers you choose and the permissions you grant — nothing more.”

The Agorid security modelSandboxed execution · scoped secrets · self-hosted

Security you can read the source of

Self-host it, sandbox it, and grant each agent only what it needs.