Desktop consoles that keep your models, your keys and your spend under your own roof. Buy them once and own them — not rented, not metered by anyone else, and not quietly phoning home. I build for these folks what others won’t.
macOS available now · Windows & Linux — coming soon
🐧 Run Linux? Volunteer to beta test →
Same bones, built for three different desks. Here is which one is yours.
Six channels on one board: cloud providers and local runtimes side by side, each with its own spend cap, its own meter, and its own halt switch. Flip Sovereign Mode and every outbound call is refused before it is built — not hidden, refused.
Agent identity signing, a SIEM webhook for the security team, a custom port blocklist for corporate IT, and telemetry that lands on your disk instead of ours.
Three channels instead of six, and every one of them flips between a cloud provider and a model running on your own machine. Point one at Ollama and it finds your loaded model on its own — no configuration, no setup screen.
Not a cut-down version. A shorter one. The same spend caps, the same injection shield, the same port director — on a board you can read across the room.
The cloud is not switched off here, it is absent. No provider endpoints compiled into the binary, no accounts, no licence server, and a content-security policy that permits localhost and nothing else. Six local runtimes, one board.
Adds live Morse and CW decoding from real radio audio, and N.O.M.A.D. — an offline reference shelf that reads only from a folder in your own home directory. Maps, medical, RF, whatever you put there.
The console is a monitoring surface. Where you put it changes what it's for.
Put the console on a side monitor, a small office TV, or a projector, and keep working on your main machine. Spend, channel status and the halt switch stay visible without taking a single pixel from what you're actually doing — the studio-wall setup, on hardware you probably already own.
And when it's across the room, you don't have to walk over to it. Hold the mic and say “Channel 2, pause” — recognised directly in code before anything is dispatched, so it never reaches a model and there's nothing to misinterpret. Watching a run go wrong on the wall and being able to call it off from where you're sitting is the whole point of putting it there.
It remembers which display it was on and reopens there, so you're not dragging it back across every launch. If that display is unplugged, it falls back to your main screen instead of vanishing off-view.
Every control — the faders, the rotary knobs, the resize edge — is driven by pointer input rather than mouse-only handlers. A stylus or a touchscreen drives the console exactly the way a mouse does, which is what makes a touch panel in a rack or on a desk a sensible place to put it.
Designed for touch from the start; not yet certified on a specific touch display. We'd rather say that than promise a device we haven't run it on.
Collapsed, it's a single strip — six channel readouts, spend, and the halt switch — that floats above your other windows instead of getting buried behind them. Expand it when you need the full board, collapse it when you don't. It's a piece of equipment you keep in view, not a window you go hunting for.
Different tools for different threat models — one for people who use cloud models and want them governed, one for people who won't touch them at all.
Six channels: three cloud providers and three local runtimes, side by side on one board. Per-channel spend caps that pause a model before it bankrupts you, a Sovereign Mode switch that severs every outbound call on demand, and API keys that live in your OS keychain rather than in the app window.
The same console with the cloud taken out at the source — not switched off, removed. No accounts, no licence server, no provider endpoints in the binary, and a content-security policy that permits localhost and nothing else. Adds live Morse/CW decoding from real radio audio and N.O.M.A.D., an offline reference panel that reads only from your own disk.
Three channels instead of six, and every one of them switches between a cloud provider and a model running on your own machine. Not a cut-down version — a shorter one. Same spend caps, same injection shield, same port director, on a board you can read at a glance. Built for a desk that is already busy enough.
Every tier includes the fuse that stops a runaway bill before it happens — the rest is how much control you want on top of it.
Hold the mic button and speak like normal — it lands in the composer as text, same as typing. But a specific phrasing skips the model entirely and executes instantly:
"Channel [1–6], [action]"
Say the channel number first, then the action — e.g. "Channel 4, pause." Each command only ever touches that one channel — never another channel, never the master bus (Global Cap, Sovereign, HALT ALL). Recognized directly in code before anything is sent anywhere, so there's no model judgment involved and nothing to drift.
Free — no signup, no account, nothing to install
The same maths the Stop-Loss fuse runs inside the console, out here where anyone can use it. Put in your own numbers — the second figure is the one most teams never budget for.
Every plan is either a straightforward monthly rate, or pay once and keep it — no asterisks either way. Sovereign Hammer is lifetime only and sits in its own section above.
Currently shipping to US customers only. Outside the US? Let us know you're interested — it helps decide what to open up next.
For one or two agents and a local model of your own. New to this, security-minded, or you simply want one good tool rather than a system to learn.
Three channels, cloud or local on every one. One price, everything on — no tiers and nothing held back.
A finished thing. It does not have tiers and never will.
Buy MiniFor a board that is going to fill up. Six channels from the start, and room to grow into more without changing tools.
Key masking, circuit breakers, and every protection that comes included at no extra cost in every tier. The accessible entry point.
The first rung. Move up to Pro or Enterprise whenever you like, or add single features à la carte — you keep the same console.
Buy LiteFor anyone running several agents at once who wants the protections on without thinking about it. This is the one that suits most people.
Mute/Solo, Global Stop-Loss, Injection Shield, Channel Rollback, RFT levels 1–3.
Buy ProFor security teams and anyone who has to answer to an audit. Everything on, and the hooks to feed your own tooling.
Full RFT 1–5, W&B LIVE, SIEM webhook, custom port blocklist. Built for security teams.
Buy EnterpriseFor a team. Five Enterprise seats bought once, handed out however you like.
5 Enterprise licenses in one purchase — all keys emailed together, each teammate activates their own on their own device.
Buy Team PackNeed more than 5 seats? Contact us for a custom group size.
Built in the open, shipped when they're actually ready — not before.
An expanded console for running many more agents at once — only ships if the prototype can actually back up the claim.
A build-to-order antenna kit for Sovereign Hammer — the radio side of the console, so the CW decoder has real signal to read rather than a line-in you had to rig yourself. Parts list and price land here once it's built and tested, not before.
A new hardware project, early days. Details land here once there's something real to show.
