Product

One model. One agent. Yours to run.

Four parts, one idea. A model you host, an agent that drives it, a managed watch for teams that want it run for them, and the core all three sit on. Everything runs inside your perimeter by default.

The model

Surrogate One

Status: in training on NVIDIA Inception compute

A DevSecOps and SRE model you host yourself. It is specialized on the work your team actually does, not tuned to be a general chatbot, so it stays small enough to serve on a single GPU you own.

Because the weights run on your hardware, using it is not a call to us. It is a call inside your own network. You can fine-tune it further on your own code and incidents, and that improvement stays behind your walls.

The agent

Surrogate Code

Status: working harness, design-partner preview

A terminal and TUI engineering agent. It reads your code and runs commands on the model you host, and it asks before anything leaves the box.

When a task genuinely needs a frontier model, Surrogate Code routes out through an egress gate that only reaches providers that will not train on your data, and it logs every byte that leaves. Nothing goes out silently.

Managed

Sentinel

Status: in development

The same agent offered as a managed service that watches your infrastructure around the clock. It reads a runbook, acts on it, and reports what changed.

What it is allowed to change is set per service and per action, not by one global switch. It runs inside the authority you grant, and it deploys into your own cloud account so the data plane never comes to us.

The core

Arkship

Status: internal, powers the three above

The orchestration runtime the other three run on. It carries the tool-use, the long-horizon memory, and the tiered authority model, built once so every agent inherits it.

Arkship is infrastructure, not a product you pick on its own. It is here so you know what sits underneath.

The wider portfolio

Cloud operations and business tools.

CostinelFinOps

Real-time cloud cost visibility with machine-learning anomaly detection, so your FinOps team sees what changed in the bill before the invoice does.

VanguardCloud security posture

Continuous posture management across large multi-account estates, with risk assessment, automated remediation, and compliance mapping.

WorkioWorkforce

Time-attendance and earned-wage access delivered inside LINE, built for Thai daily-wage and SME teams who do not want another app to install.

LeadFlowSales

A multi-tenant lead-generation and sales-pipeline platform for Southeast Asia, with per-lead consent tracking under PDPA.

Design partners

Want to run this in your environment?

We are working with a small number of design partners in regulated and air-gapped teams. If that is you, we should talk.

Become a design partner How the egress gate works
Axentx · Bangkok, Thailand
NVIDIA Inception member