Cove Join the waitlistJoin
Source release coming soon

Give your agents a full computer. Run it securely and cost-effectively on your own hardware.

Cove gives you secure sandbox machines for your agents, and for anything else that needs a real computer. Each one is a full Linux machine with a desktop, a browser and root, ready in under a second. It runs on servers you own, so your code and data never pass through someone else's cloud.

Join the waitlist See how it works

A full virtual machine. No containers. No Kubernetes.

Your server Secure VMs · root access · your firewall browser trains.example/book FromLondon ToParis · Fri 09:01 Confirm assistantalways on editor · terminal $ git push origin main ✓ 214 tests · commit 312 coding-agentup 12 days throwaway $ curl -sL unknown.sh | sh installing 41 packages… $ python analyse.py ✓ report.csv written deleted after use sandboxdeleted in 4 min clones ×20 from onecheckpoint same task, 20 approaches fleet20 clones in parallel
One server, every kind of agent: a personal assistant that is always on, a coding agent that runs for weeks, a sandbox thrown away after one job, and a fleet of clones working in parallel. Each gets a full virtual machine, and nothing leaves your server.

A whole computer, instantly

Desktop, browser, root and systemd. Ready in under a second, asleep when idle.

Your hardware, your rules

One binary on one server. Your network, your firewall, your bill.

Secure by construction

Every agent in its own virtual machine. Nothing open by default. Every session recorded.

Made to hand to your users

An API, single sign-on, teams and quotas, ready to put inside your product.

Experience

The more machine an agent gets, the better it works.

Containers and locked-down sandboxes make agents ask permission for everything. A Cove machine is a real computer. The agent installs what it needs, runs the app, opens a browser and checks its own work.

  • Ready before you finish the commandMachines come from a warm pool of pre-booted snapshots. A new one is running in under a second, with every service already up.
  • A desktop and a browser, not just a shellAgents drive a real graphical desktop, so they can test web apps, fill in forms and use tools that have no command line. People can watch or take over.
  • Sleeps when idle, wakes on the next connectionIdle machines pause and give their memory back. The next SSH login or request wakes them. Nobody manages start and stop.
  • Any image, any stackStart from a ready-made image or any Docker image. Checkpoint a machine, clone it, or resize it while it runs.
  • Plain SSH, a browser terminal, or the APIAgents and engineers use the tools they already have. Nothing to install on the client.
laptop
$ cove new --image ubuntu-desktop
✓ quiet-fox ready in 0.8 s (warm pool)
  ssh     quiet-fox.cove.internal
  desktop https://quiet-fox.cove.internal/desktop

$ ssh quiet-fox
agent@quiet-fox:~$ sudo apt-get install -y postgresql
Setting up postgresql-16 ... done
agent@quiet-fox:~$ docker compose up -d
✓ api, worker, redis started
agent@quiet-fox:~$ exit

# 10 minutes later, nobody connected
$ cove ls
NAME        STATE    IDLE   MEMORY
quiet-fox   paused   10m    0 B in use

$ ssh quiet-fox       # wakes on connect
agent@quiet-fox:~$
0.8 s
from request to a running machine
~850 ms
to restore a 2 GB machine from its snapshot
0 clicks
to start or stop a machine; it sleeps and wakes on its own

Your hardware, your rules

Agent computers without trusting someone else's cloud.

Hosted sandboxes ask you to send your users' code, credentials and data to a third party and pay by the minute. Cove runs where you already run things: a server in your rack, a box under a desk, or a machine you rent.

One server · 40 machines 64 cores · 256 GB RAM warmzzzzzzwarmzzwarmzzzzzzzzzzwarmzzwarmwarmzzwarmzzwarmzzzz 18 running 14 paused, memory freed 8 warm Memory 170 GB in use 256 GB of RAM 640 GB promised cove · one binary · full virtual machines · no cloud account
Forty machines on one server. Paused ones hand their memory back and warm ones wait to be handed out, so the machines are promised far more memory than the server has.
  • One server, one binaryNo Kubernetes and no distributed system to operate. Add a bigger box before you add more boxes.
  • Dozens of machines per serverPaused machines give memory back, and memory is shared safely between them. A single server carries far more machines than it has RAM for.
  • Your network, your egress rulesMachines sit on your network behind your firewall. You decide what they can reach.
  • Source releaseRead every line that touches your users' work. Run it, change it, and never be locked in. Source release coming soon.
  • A fixed cost you already knowYou pay for the hardware, not by the agent-minute.

Secure by construction

The agent gets the machine. It never gets your network.

An agent with root will eventually run something it shouldn't. Cove assumes that and contains it. Each agent gets its own virtual machine, cut off from its neighbours, reachable only through a gateway that checks who you are and records what happens.

  • A hardware boundary, not a containerEvery machine is a separate KVM virtual machine under Cloud Hypervisor, with a small, sandboxed device model. A container escape does not reach the host.
  • Machines can't see each otherTraffic between agent machines is dropped in the kernel. One compromised agent cannot scan or attack another.
  • Nothing open to the internet by defaultEvery way in goes through an access gateway with single sign-on. Opening an app to the outside is an explicit, per-machine choice.
  • Every session recordedTerminal sessions are recorded and auditable, so you can see exactly what an agent or a person did.
  • Secrets handed over, not baked inCredentials are injected into a machine when it runs, instead of being baked into images.
Your usersand their agents Access gateway single sign-on session recording machine-1own kernelown disk machine-2own kernelown disk dropped in kernel Your server Secure VMs · no ports open by default · your firewall
The only way in is through the gateway. Agent machines have no route to each other.
What you are trustingHosted agent sandboxCove
Where your users' code and data liveA vendor's cloudYour hardware
Who can read the platform's codeThe vendorAnyone, from the source release
Isolation between agentsVaries, often containersA virtual machine each
Who controls outbound network accessThe vendor's policyYour firewall
Session audit trailIf the vendor offers itRecorded on your side
How cost growsPer agent-minuteWith your hardware

For builders

Full computer use for your agents, on compute you trust.

Agents that can use a whole computer, with a desktop, a browser and a terminal, can do far more work. Cove lets you offer that inside your own product, on hardware you control.

  • One API call per machineCreate, pause, clone and delete machines from your backend with an API key.
  • People and teams built inSingle sign-on, per-user and per-team quotas, and shared machines.
  • Lifecycle webhooksYour product hears when a machine starts, pauses or stops.
# your backend, when a user starts an agent task
POST /api/vms
# signed with your API key
{
  "image": "ubuntu-desktop",
  "owner": "user-4821",
  "team":  "acme-support"
}

201 Created
{
  "name":    "quiet-fox",
  "state":   "running",
  "ssh":     "quiet-fox.cove.internal",
  "desktop": "https://quiet-fox.cove.internal/desktop",
  "ready_ms": 812
}

Waitlist

Run agent computers on your own hardware.

Tell us where to reach you and you're on the list. Then, if you have a minute, tell us what you're building.

  • One field to join. Ten optional questions after that, if you have a minute.
  • Get the source the day it drops.
  • Early help from the people building Cove, for your first deployment.
  • Your answers shape what we build next.

We store what you enter to email you once when Cove opens. Nothing else, no newsletter unless you ask. Want it deleted? Reply to that email or write to jeremy@tenfourty.com. Your answers help us decide what to build; we never share them.

1 / 11
What's your work email?

That's all we need to add you to the list. We'll write once, when the source drops.

You're on the list. Got 60 seconds to help us build the right thing?

Ten quick questions, every one optional. Skip any of them, or stop whenever you like. You're already signed up.

And who are you?
Which best describes you?
What do you most want to achieve?
What's the biggest thing in your way today?
What have you tried that didn't work out?

Choose as many as apply.

How many agent machines would you run at once?
Cove is free to run. What would you pay each month for support and extras?

Think of help with your deployment, guaranteed response times and enterprise features.

How soon do you need this?
Anything else we should know?

Your setup, a feature you need, a deadline. Anything.

Would you do a 20-minute call with us?

It's a research call, not a sales call. We want to hear how you'd use Cove while we can still change it.

↑ ↓ to pick · ← → back and next · Enter ↵