OmniArena Cloud
Same binary. Same isolation. We run it for you.
Connect your AI agents to a secure execution control layer. No installation. No sysadmin. Same 6-layer kernel defense.
How it works
1
Get your instance
We provision a dedicated instance at yourname.omniarena.getomnios.com with unique credentials.
2
Connect your agents
Point your SDK, MCP bridge, or HTTP calls to your instance URL. Python, JavaScript, LangChain, CrewAI — all supported.
3
Configure from dashboard
Edit policies, set token budgets, switch security profiles, filter audit logs — all from your browser.
What you get
Security
- ✓ 6-layer kernel isolation (seccomp-bpf, namespaces, chroot)
- ✓ 17 dangerous syscalls blocked at kernel level
- ✓ Empty network namespace (no internet by default)
- ✓ Filesystem jail (only /tmp writable)
- ✓ 3 security profiles: strict / moderate / permissive
Governance
- ✓ Per-agent identity tracking (up to 32 agents)
- ✓ Token budget enforcement (429 on exceed)
- ✓ Per-agent rate limiting
- ✓ Persistent audit log with agent filter
- ✓ Policy as Code (blacklist/whitelist, hot-reload)
Admin Dashboard
- ✓ Real-time metrics (execs, blocked, tokens, agents)
- ✓ Policy editor (add/remove rules from browser)
- ✓ Token budget manager per agent
- ✓ Security profile switcher
- ✓ Built-in command terminal
Infrastructure
- ✓ Dedicated instance (not shared)
- ✓ TLS encrypted (HTTPS only)
- ✓ Your own subdomain
- ✓ 99.9% uptime (systemd auto-restart)
- ✓ Same binary as self-hosted (186KB, 0 deps)
Self-hosted vs Cloud
| Self-hosted (free) | Cloud (managed) | |
|---|---|---|
| Security | 6 layers | 6 layers |
| Installation | curl + sudo | None |
| Maintenance | You manage | We manage |
| TLS | You configure | Included |
| Dashboard | localhost | yourname.omniarena.getomnios.com |
| Blast radius | Your server | Our server (isolated) |
Ready to try it?
We'll set up a dedicated instance and send you the credentials.
Or self-host for free: curl -sSL getomnios.com/install/omniarena.sh | sudo bash