~20KB
Freeze your system. Let agents run wild. Reboot to undo everything.
Instant system restore — bare-metal Deep Freeze in ~20KB.
LinuxThe problem
AI agents (OpenClaw, Devin, Copilot Workspace) can install packages, modify configs, delete files, and break systems in seconds. Testing them on real machines is terrifying. Deep Freeze costs $45/year per machine, only works on Windows, weighs 200MB, and has zero AI workflow integration. Linux teams running CI/CD on bare-metal, threat research labs, or shared workstations have no lightweight option.
The solution
OmniFreeze uses OverlayFS to create an instant copy-on-write snapshot of your system. All writes go to a temporary layer. Reboot (or run one command) and everything reverts to the frozen state. The ~20KB binary has zero dependencies, an HTTP API for programmatic control, and native integration with OmniArena for safe AI agent execution.
Why Bare-Metal Matters
Deep Freeze installs a kernel filter driver on top of the OS — it can be bypassed by rootkits or driver conflicts. OmniFreeze operates via direct mount syscalls with zero userspace dependencies. No framework to exploit, no driver to corrupt, no GUI to crash. Just a 20KB binary that talks to the kernel.
Technical Specifications
| Feature | Value |
|---|---|
| Binary Size | ~20KB (estimated) |
| Dependencies | None |
| Mechanism | OverlayFS copy-on-write |
| Snapshot | Instant freeze / instant restore |
| Restore | Reboot or CLI command |
| Selective Freeze | Per-directory or full rootfs |
| Persistence Mode | Optional — whitelist dirs that survive restore |
| API | HTTP + CLI for programmatic control |
| Integration | OmniArena-compatible (freeze before agent run) |
| Boot Hook | systemd service — freezes before user session |
Comparison
| OmniFreeze | Deep Freeze (Faronics) | Shadow Defender | |
|---|---|---|---|
| Binary size | ~20KB | ~200MB | ~15MB |
| Linux support | Native | Limited | None |
| Dependencies | None | Kernel driver + GUI | Kernel driver + GUI |
| AI agent integration | Built-in API | None | None |
| Price | Free trial + one-time | $45/yr per machine | $35 one-time |
| Restore speed | Instant (discard overlay) | Reboot required | Reboot required |
| Selective freeze | Per-directory | Full disk only | Full disk only |
| Supply chain CVEs | 0 | Inherits OS stack | Inherits OS stack |
Use Cases
AI Agent Protection
Freeze the system before letting an AI agent (OpenClaw, Devin, etc.) modify your machine. If it breaks something — reboot. System restored in seconds. Integrates directly with OmniArena.
CI/CD Bare-Metal Runners
Self-hosted GitHub Actions or GitLab runners on physical Linux machines. Freeze between jobs to guarantee a clean environment every run. No Docker overhead, no VM boot time — just instant restore.
Honeypot / Threat Research
Deploy a honeypot, let malware execute and spread, capture IOCs, then restore to pristine state with one reboot. Repeat indefinitely without reimaging. Perfect for malware analysis labs.
DevOps Destructive Testing
Test destructive scripts (rm -rf, config overwrites, package downgrades) on real machines without risk. Freeze, test, restore. Faster than spinning up VMs.
Try Now — Free
Coming Soon
This product is under active development. Contact us for early access or to be notified when binaries are available.
Talk to the Team