Kernax
Pricing → For Teams → CLI → Security → Docs → Blog →
Request Beta Access →

Built for Strict Engineering Privacy

Your codebase stays on your machine. Kernax combines local AST parsing with stateless, zero-training API routing so you never trade intellectual property for autonomous speed.

Stateless Proxy Architecture

Kernax operates as a pass-through orchestration layer, not a code warehouse. We do not clone your repositories to remote servers or store your source files in persistent databases.

  • Zero server-side codebase storage.
  • Ephemeral in-memory request routing.
  • Strict client-side exclusion for .env, keys, and ignored paths.

Local AST Indexing & Key Isolation

Codebase mapping happens locally on your device via Tree-sitter AST graphs. Only the exact AST nodes and file slices required to solve your active task traverse our encrypted API gateway—keeping raw API credentials off developer machines.

  • On-device structural code indexing.
  • Scoped snippet transmission instead of full-repo uploads.
  • Centralized token budgets without exposing plaintext API keys.

Zero-Training Inference Routing

Kernax routes inference workloads through vetted commercial API gateways—including Fireworks AI and OpenRouter—strictly configured to deny prompt training. Neither Kernax nor our inference providers train foundation models on your code.

  • Enforced non-training API policies (data_collection: deny).
  • Direct commercial API transit via Fireworks AI & OpenRouter.
  • Transparent multi-model routing with zero third-party ad tracking.

Hard-Lock Execution Guardrails

Autonomous agents shouldn't mean unchecked shell access. Kernax enforces kernel-level command interception and granular tool permissions directly inside your local environment before a single line executes.

  • Hard-Lock guard blocking destructive commands (rm -rf, drop database).
  • Granular per-tool approvals for file writes, shell, and MCP servers.
  • Automatic cancellation on unattended approval timeouts.

Security Standards & Data Governance

Engineered around strict data minimization, transport encryption, and transparent legal accountability.

TLS 1.3 Encryption

All traffic between the Kernax client, our gateway, and inference APIs is encrypted in transit via Cloudflare TLS 1.3.

Zero-Training Policy

Commercial API payloads are contractually and programmatically excluded from model weights and dataset training.

Strict Data Governance

Engineered under strict data minimization principles—collecting only billing and account metadata with zero telemetry on source code.