Surrogate OneThe model
A DevSecOps and SRE model you host yourself. Specialized on the work your team actually does, and small enough to serve on your own GPU.
Don't send your code to the model.
Bring the model to your code.
Surrogate is an engineering agent that runs a specialized model inside your own environment. Your code and your telemetry never leave your perimeter. When a task needs the frontier, it routes out through an egress gate you can audit.
surrogate · local · egress = off
10:22:04 read payments/gateway.go // local
10:22:06 run go test ./... passed // local
10:22:09 egress off · 0 bytes left this machine
Why sovereign
You should not have to trust us. You should be able to verify us.
A company born this year cannot out-trust one you already know. So we removed the need. Unplug the network and Surrogate still reads your code, runs your tests, and fixes what breaks.
Nothing leaves the machine unless you route it out yourself, and the egress gate shows you every byte when you do. Regulated and air-gapped teams cannot hand their source to a cloud they do not control. Surrogate is built for exactly that constraint.
Inspectable, not a brand you take on faith. Run it disconnected and watch. See how the egress gate works
What we build
One model. One agent. Yours to run.
Surrogate CodeThe agent
A terminal and TUI engineering agent. It works across your stack on the model you host, and asks before anything leaves the box.
SentinelManaged
The same agent as a service that watches your infrastructure around the clock and acts inside the authority you set, per service and per action.
ArkshipThe core
The orchestration runtime every Axentx agent runs on, with a tiered authority model built once and inherited everywhere.
The company
Built in Thailand. Made to run in your walls.
If you operate infrastructure that cannot be handed to someone else's cloud, we should talk. Finance, government, healthcare, and critical infrastructure.