Your AI agent handles your keys.
Does it deserve its own VM?
API keys, email, repos, and shell access. That's a lot of trust to put in a shared container.
Security Architecture
Hypervisor-level isolation. Not container sandboxing.
Every KiloClaw instance is a dedicated Firecracker micro-VM with its own kernel, its own network, and its own encrypted storage. The same isolation model that runs AWS Lambda.
Firecracker micro-VMs
Each instance runs in a dedicated Firecracker micro-VM — the same hypervisor-level isolation that powers AWS Lambda. No shared containers, no shared kernels.
Per-user WireGuard networks
Every instance gets its own WireGuard VPN tunnel. Your traffic never touches another tenant's network.
No cross-tenant access
Independently assessed by a third-party security researcher. Result: no cross-tenant path found. Your instance is fully isolated.
Plus LUKS-encrypted NVMe volumes, RSA-OAEP + AES-256-GCM secret encryption, and more. Full details in the white paper.
Why containers aren't enough
Containers share a kernel. A kernel exploit exposes every tenant on the host.
KiloClaw uses Firecracker micro-VMs — the same isolation behind AWS Lambda. Own kernel, own memory, own network. No shared surface, no cross-tenant path.
Independently assessed. The researcher couldn't break it.
VM
isolation
WireGuard
networking
LUKS
encryption
Use Cases
What people run on KiloClaw
Real workflows running on isolated, encrypted infrastructure. Your agent handles sensitive credentials — and they never leave your VM.
"Read my email and flag what's urgent"
Gmail triage — your agent reads, labels, and archives. Credentials never leave your encrypted instance.
"Triage new GitHub issues every morning"
Daily automation that reads issues, comments, and opens PRs — with your tokens stored in encrypted-at-rest storage.
"Check my calendar and warn me about conflicts"
Proactive scheduling across Google Calendar and Outlook. OAuth tokens sealed behind per-instance encryption.
"Review this PR and tell me on Telegram"
Code review piped to your chat app of choice. API keys never shared between tenants.
"Deep research with primary sources"
Find named individuals, community sentiment, and news coverage. Your research queries stay in your isolated VM.
"Monitor this repo for new releases"
Automated watching that alerts the moment something ships. Cron jobs run in your own Firecracker VM.
Simple pricing
500+ models. $9/mo.
Hypervisor-level security included.
Renews at $9/month · 7-day free trial ·
No credit card required
- Dedicated Firecracker micro-VM per instance
- LUKS-encrypted storage + WireGuard network
- 500+ AI models via Kilo Gateway
- Automatic updates & monitoring
- Cancel anytime
AI inference billed separately via Kilo Gateway. 500+ models, zero markup.
< 60s
deploy time
500+
AI models
0%
markup on tokens
As seen in
“By eliminating the SSH, Docker, and YAML barriers that have gatekept high-end AI agents, Kilo is betting that the next phase of software development will be defined not just by the quality of a model, but by the reliability of the infrastructure that hosts it.”Feb 24, 2026
“A lot of people love the idea of OpenClaw right up to the part where you are babysitting a Mac mini or a sketchy VPS. This lets you skip all that and go straight to seeing whether an agent is actually useful in your day.”Mar 2026
“Already pulling 760 upvotes on Product Hunt. KiloClaw sits squarely in the Developer Tools and Open Source categories, and it's been turning heads among 45,000+ founders, developers, and CTOs.”Mar 4, 2026
Frequently Asked Questions
Security, pricing, and everything else
What is KiloClaw?
KiloClaw is a fully managed, hosted version of OpenClaw — the open-source AI agent with 320k+ GitHub stars. We handle infrastructure, security, updates, and monitoring so you can focus on what your agent does.
What is Firecracker and why does it matter?
Firecracker is an open-source virtual machine monitor (VMM) created by AWS for Lambda and Fargate. It provides hypervisor-level isolation — each KiloClaw instance runs in its own micro-VM with its own kernel, completely separated from other tenants. This is fundamentally stronger than container isolation.
What does "independently assessed" mean?
We commissioned a third-party security researcher to perform a full audit of KiloClaw's isolation model — including attempting cross-tenant access, network sniffing, and secret extraction. The assessment found no cross-tenant path. The full results are published in our security white paper.
How are my API keys and secrets protected?
Secrets are encrypted at rest using RSA-OAEP for key wrapping and AES-256-GCM for authenticated encryption. They live on LUKS-encrypted NVMe volumes inside your dedicated Firecracker micro-VM. Even if someone gained physical access to the underlying storage, your secrets would be unreadable.
Which AI models are available?
All 500+ models available through Kilo Gateway — including Claude, GPT, Gemini, DeepSeek, and open-source models. You can also bring your own API keys. No markup on AI tokens.
How does pricing work?
KiloClaw hosting starts at $9/month (with a $4 first month) or $8/month on a 6-month commitment ($48 upfront). Both include a 1-week free trial with no credit card required. AI inference is billed separately through Kilo Gateway at zero markup.
Where does my data live?
Your agent's data is encrypted at rest and in transit inside your dedicated micro-VM. We don't train on your data, we don't sell your data, and you can export or delete everything at any time.
Try KiloClaw free for one week
No credit card required. Hypervisor-level isolation from day one.
Start Free Trial