Automation & Ops cloud-sandboxself-hostedgitopschange-requestconnectorsslack-integrationsecrets-management

Kortix

Open-source AI Management System that puts your agents, skills, company memory, and connectors in a git repo you own, delivering real work on cloud computers.

FollowAgents review · FARS-2.1
Use with care
60/ 100 5-point scale 3.0 / 5
1 2 3 4 5 6
1Trust17 / 29 · 2.9/5

Evidence shows least privilege design: session isolation, per-resource permissions, credential brokering, secrets encryption. User confirmation via change requests and approval gates. Data flow transparency with audit trail and session-scoped audit. Sensitive data handling with encryption and injection. Dependency security with many overrides and patches. External effects with approval gates and change requests. Rollback only via git versioning, no dedicated rollback. Source attribution: publisher unverified, but repo has clear commit history. Deductions: rollback and source attribution insufficient evidence.

2Reliability9 / 14 · 3.2/5

Self-consistency: README consistent with code structure, tests cover key paths. Dependency availability: uses pnpm and lockfile, but not verified. Failure messages: tests show specific error handling. Deductions: dependency availability unverified, failure messages only partial.

3Adaptability12 / 18 · 3.3/5

Audience and scenarios: enterprise and developers, self-host and cloud options. Capability boundaries: clearly states agents run in sandbox, changes require approval. Trigger precision: supports cron and webhooks. Environment fit: multiple deployment options. Deductions: capability boundaries and trigger precision only documented, not verified.

4Convention10 / 18 · 2.8/5

Information architecture: clear directory structure. Install notes: quickstart and self-host guide. Naming stability: unified versioning. Examples and FAQ: docs links. Known limitations: not explicitly listed. License: Elastic License 2.0. Versioning changelog: version numbers but no detailed changelog. Maintenance responsibility: publisher unverified. Deductions: known limitations missing, maintenance responsibility unclear.

5Effectiveness9 / 13 · 3.5/5

Output usability: agents return finished deliverables. Marginal value: unique as open-source alternative. Cost benefit: self-host free, cloud priced. Deductions: cost benefit not verified.

6Verifiability3 / 8 · 1.9/5

Claim traceability: README claims not fully mapped to code. Cross-source corroboration: no independent verification. Fact inference separation: not clearly separated. Deductions: lack of traceability and independent verification.

Evidence confidence: Low Reviewed Aug 09, 2026 Reviewed revision 1fd281f897f5
The upstream repository has new commits since this review. The score still applies to the reviewed revision shown and may not cover the latest changes.
Before you use it
  • Publisher identity unverified, assess supply chain risk carefully.
  • Elastic License 2.0 restricts hosted services, may affect commercial use.
  • Many dependency overrides and patches, but actual security not verified.
  • Rollback relies only on git, no dedicated rollback feature.
  • Known limitations not explicitly listed, potential hidden risks.
Review evidence [1][2][3][4][5][6][7][8]
See the full review method →

What does this agent do, and when should you use it?

Kortix is an open-source AI Management System positioned as an alternative to Claude Cowork and ChatGPT Work. It centralizes a company's agents, skills, memory, and connectors in a single versioned git repository owned by the company. Each session launches an isolated cloud computer (sandbox) on its own branch, where agents work and propose changes via a change request that a human approves before merging to main. The system supports any model provider and your own API keys, and can be deployed on Kortix Cloud, your own VPC, or on-premises. It includes a CLI for managing sessions, change requests, and chat, and integrates with Slack for team collaboration.

Kortix runs OpenCode agents that operate on real cloud computers—isolated sandboxes per session, each on a branch named after the session. Agents can install software, run commands, and access tools, then submit work through change requests for user review and merge. The platform manages agents, skills (reusable know-how), memory (plain files), connectors (3,000+ apps via MCP, OpenAPI, GraphQL, HTTP), secrets (server-side brokering, encrypted at rest), and triggers (cron, signed webhooks). It provides CLI commands like kortix sessions new, kortix cr ls, and kortix chat, and supports Slack integration. Deployment uses Docker and can be initiated with kortix self-host start.

  1. A development team leader wants to version-control their AI workflows and own an auditable repository defining agents and processes.
  2. A solo developer self-hosts AI workflows entirely on their laptop or VPS, using their own API keys.
  3. A company needs to run thousands of parallel, isolated agents across many sessions, for tasks like research or code generation.
  4. An operations team wants to trigger sessions from Slack, starting tasks and receiving results without leaving their chat app.
  5. A security-sensitive organization requires strict permissions, audit trails, and deny-by-default merging of agent changes.

What are this agent's strengths and limitations?

Pros
  • Fully open-source and self-hostable, with data, models, and infrastructure under your control.
  • Each session runs on an isolated cloud computer, enabling parallel execution of thousands of sandboxes.
  • Company knowledge, configuration, and changes are versioned, diffable, and auditable.
  • Model-agnostic, supporting any provider and your own API keys.
  • Large integration ecosystem: 3,000+ apps, plus MCP, OpenAPI, GraphQL, and HTTP connectors.
Limitations
  • Self-hosted setup requires Docker and Docker Hub access; not fully offline.
  • Initial setup requires familiarity with CLI and git workflows compared to turnkey products.
  • Memory system is file-based; compound memory is planned but not yet implemented.
  • Slack is the only production-grade channel; Teams, email, and voice are experimental or planned.

How do you install or deploy this agent?

Clone the repository: git clone https://github.com/kortix-ai/suna.git. Requires Node.js and pnpm. Run pnpm install to install dependencies. For local development, use pnpm dev to start the web app and API. For self-hosting, run kortix self-host start, which pulls Docker images and walks through setup, asking for integration credentials. The CLI can be installed via curl -fsSL https://kortix.com/install | bash.

How do you use this agent?

  1. Initialize a project with kortix init, generating kortix.yaml plus agent, skill, and runtime configuration. 2. Deploy with kortix ship. 3. Start a session with kortix sessions new --prompt "...". 4. Review change requests with kortix cr ls and merge them. 5. Chat with the agent using kortix chat. Alternatively, sign up for Kortix Cloud and create a project with no installation.

How does this agent compare with similar options?

Compared to Claude Cowork and ChatGPT Work, Kortix is open-source, supports any model provider and your own API keys, and can be deployed on your own infrastructure. Claude Cowork is limited to Anthropic models and their cloud, while ChatGPT Work is limited to its own models and cannot be self-hosted.

FAQ

What models does Kortix use?
Kortix is model-agnostic; you can use API keys from any provider, or leverage existing ChatGPT, Claude, or Cursor subscriptions.
How does Kortix handle security and permissions?
Kortix provides per-session isolation, team/group/role management, resource-level permissions for both people and agents, server-side brokered credentials, and encrypted secret management.
How do agents deliver work?
Agents work in sandboxes and commit outputs on branches. Work enters main only through human-approved change requests, with deny-by-default merging for agents.
Where can Kortix be deployed?
You can self-host on a laptop, VPS, VPC, or on-prem network, or use Kortix Cloud (managed, $40/seat/month plus usage).

Related agents