Stateful to operate
A database that needs backups, migrations, and a tested recovery story for when something breaks.
Agor Cloud · Private beta
Fully managed Agor for your whole team
Agor is open, and yours to run. Agor Cloud is for teams who’d rather not. We operate a hardened, always-current Agor for you, with scaling, isolation, governance, and observability handled, so your team can focus on the work, not the platform underneath it.
Open source, minus the opsYou can run Agor yourself.
You can run Agor yourself.
Most teams shouldn’t have to.
Agor is source-available under BSL 1.1, and running it in production yourself is permitted and supported. But operating it well for a whole team becomes its own full-time job:
Isolation that holds
Per-user, per-branch boundaries so one developer’s session, worktree, or runaway process never stomps another’s.
Always patched
Same-day fixes when the next CVE lands in Node, Postgres, the kernel, or any dependency in the stack.
Eyes on everything
Observability across a fleet of dev environments and an audit trail your security team will actually accept.
Agor Cloud is us doing that once, well, for everyone.
Fully managed
Everything running, nothing to babysit
The same platform you know from the open project, operated for you with the rigor Preset brings to Preset Cloud.
Fully managed, always current
Runs on autoscaling Kubernetes with tuned node pools and resource budgets. New releases land on Cloud after they’re validated against our own production traffic, never yours.
Segment into isolated workspaces
Run multiple Agor workspaces under one account and segment them by team, project, or sensitivity. Each workspace is its own tenant, with a separate database and strict boundaries between them, so you can dial isolation up exactly where it matters.
Bring your own keys
Claude, Codex, Gemini: your keys, billed by your provider. We don’t proxy your tokens, mark them up, or take a cut, so there’s no incentive to burn more of them.
Sign-in that fits
Social sign-on today through a SOC 2 Type II identity provider, with enterprise SSO on the roadmap. Team roles decide who can see and do what.
CI-ready agents
CI-triggered sessions appear on your board in real time, keep the context that built the branch, and stay live to resume once the job ends.
Kept alive for you
Health checks, auto-recovery, and capacity management for the fleet of environments underneath your team. You build; we keep the lights on.
Governance & observability
See everything. Prove anything.
When Agor becomes part of how your team ships, you need to see what’s happening in it, and so does whoever runs your next security review.
Audit trail
Session creation, prompt submissions, branch and owner changes, and admin actions, all recorded with secret-safe metadata.
Roles & access control
Team roles (owner, admin, member) decide who can see and do what. Access is scoped per workspace and every privileged change is auditable, so the right people reach the right work and nothing more.
Usage tiers & quotas
Per-team tiers and workspace quotas keep usage visible and bounded, so a busy team can’t surprise the rest of the org.
Real observability
Structured logs, metrics, and executor-level accounting via Datadog, the same signals we use to run it, surfaced for your team too.
Deploy your way
Three ways to run it
Start on our infrastructure and move closer to your own as your requirements grow. The same Agor, in the topology your security team needs.
Agor Cloud (hosted)
A managed, single-tenant Agor instance on our infrastructure. Up in minutes, always on the latest secured release, hardened to sit safely on the public internet.
Managed private cloud
We deploy and operate Agor inside your own AWS account, so data and compute stay in your tenancy, with private network access to your VPC. Talk to us about fit.
Private cloud / on-prem
For organizations that need to operate the whole stack themselves. A larger engagement we scope with enterprise teams, so reach out to start the conversation.
Network topology is a conversation, not a checkbox. Tell us what your security team needs and we’ll work out the shape.
Security
Hardened for the public internet
Some of Agor’s capabilities are great inside a trusted network and risky on the open internet. Cloud is built the other way around, so your team can use it from anywhere, mobile included, with no VPN gymnastics.
- Hardened by defaultThe open-source flags that widen attack surface (shared dev boxes, broad bypass modes) are off in Cloud. We know which knobs belong in which position because we run it ourselves.
- Unix-level isolationSessions, worktrees, and environments run as distinct Unix users, with filesystem permissions enforcing the boundaries between users, branches, and agents as defense-in-depth.
- Independently reviewedBuilt against a documented threat model, with independent security review and penetration testing as part of how the service is operated.
- SOC 2 Type II in progressOur SOC 2 Type II audit is underway, and identity is handled by a SOC 2 Type II provider. Your AI keys stay yours and never route through us.
Who runs it
Operated by the team behind Preset Cloud
Preset runs Preset Cloud, a managed Apache Superset service used by thousands of teams. Agor Cloud is operated with the same on-call rigor, by the people building Agor. You get hands-on onboarding, a direct line for feedback, and features prioritized around what early teams actually need.
Trust the makersThe team that wrote Agor keeps it running, and they know which knobs matter.
Same-day patchingWhen a zero-day lands, the fix ships that day. You don’t track changelogs.
No on-call for youWe’re on-call for Agor, so your team stays on-call for your product.
Feedback loopA direct channel to the builders. Feature requests welcome.
Bring your team to Agor Cloud
We’re onboarding teams into the private beta now. Tell us about your team and use case, and we’ll take it from there: a quick fit call, then you’re set up in minutes.