{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": false,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": false,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": true,
  "desktop_control": true,
  "browser_and_desktop": true,
  "anti_bot": true,
  "captcha_solving": true,
  "residential_ip": true,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": true,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": true,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": true,
  "arm64": null,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": true,
  "scoped_api_keys": null,
  "spend_limits": true,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "kernel",
  "checked": "2026-09-30",
  "company": "Kernel Technologies, Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.kernel.sh/about",
   "quote": "KERNEL is operated by Kernel Technologies, Inc., a delaware corporation."
  },
  "stage": {
   "value": "series-a",
   "source": "https://blog.onkernel.com/series-a-announcement/",
   "quote": "I’m excited to share that Kernel has raised $22 million in Seed and Series A funding led by Accel, with participation from Y Combinator, Cintrifuse Capital, Vercel Ventures, Refinery Ventures, and SV Angel.",
   "confidence": "high",
   "note": "Company disclosed Seed and Series A together as one $22M announcement (Oct 2025); Series A is the last priced round."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "S25",
    "source": "https://www.ycombinator.com/companies/kernel",
    "quote": "batch\":\"S25\",\"batch_name\":\"Summer 2025\" — one_liner: \"Crazy fast, open source infra for AI agents to use the Internet\"; website https://www.kernel.sh; github https://github.com/onkernel",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": 22000000,
   "status": "confirmed",
   "basis": "company blog post announcing combined Seed + Series A funding",
   "source": "https://blog.onkernel.com/series-a-announcement/",
   "quote": "Kernel has raised $22 million in Seed and Series A funding led by Accel"
  },
  "last_round": {
   "type": "series-a",
   "amount_usd": 22000000,
   "date": "2025-10",
   "leads": [
    "Accel"
   ],
   "status": "confirmed",
   "source": "https://blog.onkernel.com/series-a-announcement/",
   "quote": "Kernel has raised $22 million in Seed and Series A funding led by Accel, with participation from Y Combinator, Cintrifuse Capital, Vercel Ventures, Refinery Ventures, and SV Angel."
  },
  "investors": [
   "Accel",
   "Y Combinator",
   "Cintrifuse Capital",
   "Vercel Ventures",
   "Refinery Ventures",
   "SV Angel",
   "Paul Graham",
   "David Cramer",
   "Solomon Hykes",
   "Zach Sims",
   "Charlie Marsh"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 22,
   "source": "https://www.ycombinator.com/companies/kernel"
  },
  "note": "The YC 'KERNEL' company (S25, onkernel.com / kernel.sh, github.com/onkernel) is this same provider, not a different company — confirmed via matching github org, website, and product description on the YC profile. Founded 2025, San Francisco; founders Catherine Jue (previously co-founder of Sway Finance, YC S16) and Raf. Combined $22M Seed+Series A disclosed Oct 2025; split between the two rounds was not separately published."
 },
 "id": "kernel",
 "name": "Kernel",
 "url": "https://www.kernel.sh/pricing",
 "category": "browser",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "headless",
   "label": "Headless",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us",
    "eu",
    "asia"
   ],
   "gpu_only": false,
   "features": {
    "desktop": false,
    "computer_use": false
   },
   "pricing": "sizes",
   "sizes": [
    {
     "name": "Headless",
     "vcpu": null,
     "ram_gib": 1,
     "disk_gib": null,
     "hour": 0.06000012,
     "month_cap": null
    }
   ],
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "One GB active browser runtime; idle standby free."
  },
  {
   "key": "headful",
   "label": "Headful (8 or 16 GiB)",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us",
    "eu",
    "asia"
   ],
   "gpu_only": false,
   "features": {},
   "pricing": "sizes",
   "sizes": [
    {
     "name": "Headful 8 GiB",
     "vcpu": null,
     "ram_gib": 8,
     "disk_gib": null,
     "hour": 0.48000096,
     "month_cap": null
    },
    {
     "name": "Headful 16 GiB",
     "vcpu": null,
     "ram_gib": 16,
     "disk_gib": null,
     "hour": 0.96000192,
     "month_cap": null
    }
   ],
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Headful Chromium with Live View + computer controls API; $0.0000166667/GB-second: 8 GiB default ($0.48/h), 16 GiB when `memory` is set on create ($0.96/h). No guaranteed CPU count."
  },
  {
   "key": "headful-gpu",
   "label": "Headful GPU",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": [
    "us"
   ],
   "gpu_only": true,
   "features": {},
   "pricing": "sizes",
   "sizes": [
    {
     "name": "GPU",
     "vcpu": null,
     "ram_gib": null,
     "disk_gib": null,
     "hour": 2.88000576,
     "month_cap": null
    }
   ],
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": 1,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Start-Up+ only; USD 0.0008000016/s (48x the GB-second rate); no standby (billed until deleted); us-east only; not available in browser pools. GPU model unpublished."
  },
  {
   "key": "app-invocation",
   "label": "App invocation (serverless agent code, 4 GB)",
   "flags": [
    "alt"
   ],
   "pricing": "resource",
   "vcpu_h": 0,
   "ram_gib_h": 0.06000012,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "granularity_s": 1,
   "min_billed_seconds": 0,
   "note": "USD 0.0000666668/s = USD 0.24/h at 4 GB; billed only while code runs; browsers billed separately; invocation concurrency 5/10/50 (20 per app on Start-Up)."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null,
  "residential_proxy_gib": 0,
  "internet": {
   "default": "full"
  }
 },
 "plans": [
  {
   "name": "Free / Developer",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 5,
   "per_seat": null,
   "concurrency": 5,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": [
    "Headless",
    "Headful 8 GiB",
    "Headful 16 GiB"
   ],
   "note": "1-day replays, 3 auth connections and vaults."
  },
  {
   "name": "Hobbyist",
   "fee": 30,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 10,
   "per_seat": null,
   "concurrency": 10,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": [
    "Headless",
    "Headful 8 GiB",
    "Headful 16 GiB"
   ],
   "note": "7-day replays; configured proxies, unlimited auth/vaults."
  },
  {
   "name": "Start-Up",
   "fee": 200,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 50,
   "per_seat": null,
   "concurrency": 150,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "GPU, regional browsers and BYO proxy; 30-day replays. App concurrency 50 org / 20 per app. Free trial offered (length not published); priority email support; browser pools, unlimited custom extensions/projects, audit log export."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "SSO, HIPAA BAA, dedicated support, ZDR, custom limits."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": null,
  "gpu": true,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": false,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": true,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": true,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu_types": [
   "model not published"
  ],
  "regions": [
   "us",
   "eu",
   "asia"
  ],
  "browser_control": true,
  "desktop_control": true,
  "anti_bot": true,
  "captcha_solving": true,
  "egress_ip_type": "datacenter+residential+mobile",
  "ip_note": "Direct egress by default; Kernel-provided datacenter, ISP, residential and mobile proxies are unmetered (fair use); stealth mode adds a static ISP proxy + CAPTCHA solver; BYO proxy on Start-Up/Enterprise.",
  "spend_limits": true,
  "audit_logs": true,
  "zero_data_retention": true,
  "mcp_server": true,
  "snapshot_auto": true,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": true,
  "secret_proxy": false,
  "volume_attach": false,
  "volume_shared": false,
  "isolation": "firecracker",
  "image_oci": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "wake_on_request": true,
  "live_resize": false,
  "own_agent_api": false,
  "lang_python": true,
  "lang_node": true,
  "egress_http_rules": false,
  "guest_firewall": true,
  "eu_data_residency": true,
  "max_session_unlimited": true,
  "open_internet": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Storage, snapshot GiB-month and public IPv4 prices are not published in the reviewed sources; null is not free.",
  "No guaranteed vCPU allocation published; browser-hour is not a verified 4-vCPU/8-GiB VM equivalent. The sizes card keeps unknown hardware null; do not coerce it to zero or auto-rank against resource-guaranteed VMs.",
  "Browser RAM is not published unless a specific mode overrides it.",
  "The homepage GB-second rate and docs preset rates agree: 1 GB headless, 8 GB headful. 16 GB is a documented headful option. Do not charge CPU+RAM again on top.",
  "Standby billing is based on browser activity, not CPU utilization. An open active live view/CDP workload may prevent savings. Pool and standby browsers continue consuming concurrency.",
  "Pool availability conflicts internally: feature table says all tiers; FAQ says Start-Up and Enterprise. Fifty-browser example already needs Start-Up.",
  "Idle pool disks are free, but snapshot_gib_month stays null because general snapshot storage is not priced. Browser profiles are not general disks.",
  "Headful = Chromium on a virtual display with Live View and a computer-controls API, not a full desktop environment; SSH into the browser VM is available (kernel browsers ssh). Headless has no Live View.",
  "eu-west / ap-southeast browsers need the Start-Up or Enterprise plan. On Free and Hobbyist Kernel is US-only (us-east), so an EU/Asia workload must pay the USD 200 Start-Up plan. Model this as region-specific mode copies with plans:[\"Start-Up\",\"Enterprise\"], or as a plan gate.",
  "16 GiB headful price (USD 0.96/h) is derived from the GB-second definition; the docs pricing table lists only one headful rate (USD 0.0001333336/s = 8 GB).",
  "YC startups get a discount ('here's our yc deal'). Terms are behind a link and not published on the pricing page."
 ],
 "sources": [
  "https://www.kernel.sh/pricing",
  "https://docs.kernel.sh/llms-full.txt",
  "https://kernel.sh/docs/info/pricing",
  "https://kernel.sh/docs/browsers/standby",
  "https://kernel.sh/docs/browsers/headless",
  "https://kernel.sh/docs/browsers/viewport",
  "https://kernel.sh/docs/browsers/processes"
 ],
 "knobs": [
  {
   "id": "active_browser_fraction",
   "label": "Fraction outside standby",
   "kind": "slider",
   "min": 0.05,
   "max": 1,
   "step": 0.05,
   "default": 1,
   "unit": "%",
   "options": null,
   "effect": "hours_factor",
   "modes": [
    "headless",
    "headful"
   ],
   "why": "Standby begins after 5 seconds without CDP/live-view activity, not at low CPU use."
  }
 ],
 "fleet": {
  "default_max_instances": 5,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": null,
  "verification": "No card required for Free.",
  "tiers": "Developer 5; Hobbyist 10; Start-Up 150; Enterprise custom.",
  "notes": "Quota is org-wide and includes reserved browser-pool capacity and standby browsers, even idle/unacquired. 10 fits Hobbyist, 50 Start-Up, 300/1,000 Enterprise. App invocation concurrency is separate. Per-project concurrency caps (org default + per-project override) sit under the org cap. API requests are rate-limited per organization (HTTP 429 + Retry-After); the numeric limit is unpublished and raised via contact.",
  "sources": [
   "https://www.kernel.sh/pricing",
   "https://kernel.sh/docs/info/pricing"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 11,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 4
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://kernel.sh/docs/info/unikernels.md",
   "quote": "One of the most powerful features of our approach is the ability to create complete snapshots of the browser's state when entering standby mode. These snapshots capture everything:",
   "note": "Trigger: standby after 5 s with no CDP/WebDriver/Live View/computer-controls activity ('Kernel browsers automatically enter standby after `five seconds` with no activity', /docs/browsers/standby). Memory included: list includes 'Loaded page content and DOM state' and 'Active downloads and processes'; restored 'in milliseconds' on next connection. Limits: the standby browser is still deleted after its timeout (default 60 s, max 72 h) counted from standby, so the snapshot does not outlive the session; 'GPU-accelerated browsers do not support standby mode.'",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "No snapshot/checkpoint/fork endpoint in the full OpenAPI spec or docs. Closest: browser profiles (cookies/storage/browser state) that are saved when a browser with save_changes is deleted or times out ('When the Kernel browser is deleted or times out, Kernel replaces the stored profile with that browser's complete state.') and loaded by new browsers - browser state only, not a machine/memory snapshot. Browser pools keep pre-warmed browsers.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "No endpoints to start/stream/resume Claude Code, Codex or a Kernel agent inside the browser VM. Kernel apps (deploy/invoke/invocation events) run your own code; process exec/spawn is a generic exec API; Managed Auth is a narrow login agent; Claude Code integration is Kernel as an MCP server/skills used FROM Claude Code, not a harness inside Kernel.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://kernel.sh/docs/browsers/live-view.md",
   "quote": "https://api.onkernel.com/browser/live/<TOKEN>?readOnly=true",
   "note": "Browser VMs expose no arbitrary public ports; access is only via per-session tokenized CDP/WebDriver/Live View URLs (Live View can be read-only) and API-authenticated 'kernel browsers ssh' with -L/-R port forwarding. No IP allowlists or user-chosen public port URLs. Network-access page: 'You don't need to open inbound ports.'",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://kernel.sh/docs/vaults/overview.md",
   "quote": "fill isn't secret isolation from the browser. an agent with unrestricted browser access, page scripts, or extensions can read values after filling.",
   "note": "Vault 'fill' writes credentials into browser form fields (values enter the VM, hidden only from your app/model context); Managed Auth logs in and stores cookies in a profile; app secrets are env vars. Exception, payments only: agentcard integration gives the agent non-secret card aliases and Kernel intercepts the recognized checkout request at egress ('the card number and cvc stay with agentcard. your agent receives non-secret aliases.') - a true out-of-VM substitution but limited to card checkout formats, not arbitrary HTTP credentials. No coverage of DB/SSH/git.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "No volume/disk resources in the API; storage is the ephemeral browser VM filesystem (File I/O API upload/download) plus browser profiles and extensions.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://kernel.sh/docs/browsers/profiles.md",
   "quote": "Each browser session loads its own profile snapshot. Profiles don't synchronize changes between running browsers",
   "note": "One profile can be attached to many browsers but as a per-browser copy, not a live shared filesystem; no shared volumes.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "firecracker",
   "source": "https://kernel.sh/docs/browsers/process-execution.md",
   "quote": "a Kernel browser is a [unikernel VM](/docs/security#2-4-security-features) with no shared host kernel — root inside your session has no path to other customers or platform infrastructure.",
   "note": "The unikernels page (https://kernel.sh/docs/info/unikernels) says 'each app instance gets its own Chromium browser running on a dedicated Unikraft-based unikernel' with 'cold start times of less than 20 milliseconds', but neither page names the hypervisor. Unikraft's microVM deployment target is Firecracker/KVM, the closest enum match to 'unikernel VM with no shared host kernel'; not independently confirmed on Kernel's own pages.",
   "checked": "2026-10-14"
  },
  "image_oci": {
   "value": false,
   "source": "https://kernel.sh/docs/info/unikernels",
   "quote": "running Chromium browsers on lightweight unikernels. This architecture represents a significant departure from traditional solutions (warm pools / Kubernetes-orchestrated Docker containers)",
   "note": "not offered: outside the product's scope. Machines are fixed Chromium-on-unikernel browser VMs or a code-deploy runtime (kernel deploy from source, no Dockerfile/config); there is no way to boot a custom OCI/Docker image.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://kernel.sh/docs/info/unikernels",
   "quote": "unikernels are specialized, single-purpose systems that include only the necessary components to run a specific application",
   "note": "derived: a minimal single-purpose unikernel VM has no documented /dev/kvm passthrough or nested-virtualization support; not mentioned anywhere in the docs.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "mem",
   "source": "https://kernel.sh/docs/info/unikernels",
   "quote": "the ability to create complete snapshots of the browser's state when entering standby mode. These snapshots capture everything: ... Active downloads and processes",
   "note": "Automatic memory snapshot on standby (idle), restored on next connection; not a user-invoked persistent snapshot API (see snapshot_on_demand=false in the card).",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "not offered: outside the product's scope. No clone/fork endpoint exists; browser pools pre-warm fresh identical browsers, not clones of a specific running machine's state.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "not offered: outside the product's scope. No forking capability of any kind is documented.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": null,
   "note": "not offered: outside the product's scope. Kernel's memory snapshots (standby) resume the same session in place; they are not used to spawn a new, separate machine.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": true,
   "source": "https://kernel.sh/docs/browsers/standby",
   "quote": "Your app can spring to life almost instantly when needed, then return to standby when idle.",
   "note": "A new CDP/WebDriver/Live View/computer-controls connection to a standby browser automatically wakes it from its memory snapshot; no explicit 'resume' API call is required.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://kernel.sh/docs/browsers/termination",
   "quote": "it will be automatically deleted after a configurable timeout (default 60 seconds)",
   "note": "The browser VM's writable filesystem is deleted with the browser; only cookies/local-storage/extensions persist across sessions via Browser Profiles, not arbitrary files on disk.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.kernel.sh/pricing",
   "quote": "8 GiB default ($0.48/h), 16 GiB when `memory` is set on create ($0.96/h)",
   "note": "Memory tier is chosen at browser creation time; no documented API to change CPU/RAM of an already-running browser. 'Resize at any time' in the docs refers to browser-pool size (instance count), not per-machine resources.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://kernel.sh/docs/integrations/claude/claude-agent-sdk",
   "quote": "kernel create --template claude-agent-sdk ... When deploying to Kernel, the app automatically installs Claude Code on the remote infrastructure.",
   "note": "Claude Agent SDK / Claude Code is offered as a first-party app template and auto-installed on deploy.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://kernel.sh/docs/bots",
   "quote": "Kernel Agent: User-directed browser automation. Kernel Agent visits pages on behalf of an end user's request; it is not an automatic crawler.",
   "note": "not offered: outside the product's scope. 'Kernel Agent' is a Web Bot Auth traffic-identity label for customer-run automation, not a first-party API that runs Kernel's own browsing/research agent on your behalf.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://kernel.sh/docs/apps/deploy",
   "quote": "The dependency manifest (`package.json` for JS/TS, `pyproject.toml` for Python) must be present in the root directory of your project.",
   "note": "Kernel apps and the SDK support Python; `kernel.browsers.repl()` etc. are also callable from the Python SDK.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://kernel.sh/docs/browsers/repl",
   "quote": "Execute JavaScript in a persistent Node.js runtime that lives alongside Chromium inside your browser's VM.",
   "note": "Node.js/TypeScript is a first-class supported runtime for both the REPL and app deployment.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://kernel.sh/docs/info/network-access",
   "quote": "You don't need to open inbound ports.",
   "note": "Browser VMs are not assigned a routable public IPv4; access is only via Kernel-hosted, per-session tokenized CDP/Live View URLs.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://kernel.sh/docs/browsers/live-view",
   "quote": "https://api.onkernel.com/browser/live/<TOKEN>?readOnly=true",
   "note": "Reachability is only through Kernel's own api.onkernel.com proxy endpoints (Live View/CDP tokens) or `kernel browsers ssh` port-forwarding; there is no way to expose an arbitrary app port on the machine over its own public HTTPS URL.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://kernel.sh/docs/browsers/chrome-policies",
   "quote": "To lock a browser to an approved set of URLs, block everything with `URLBlocklist` and then allow back only the URLs you want with `URLAllowlist`.",
   "note": "Chrome-policy level allow/deny list on top-level navigation domains/paths; it does not block sub-resource or API calls a permitted page loads from other origins, so it is narrower than a network-level security-group egress rule.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://kernel.sh/docs/browsers/chrome-policies",
   "quote": "Entries match a whole domain (`chatgpt.com`) or a specific path ... it does not block resources or API calls a permitted page loads from other origins.",
   "note": "URLAllowlist/URLBlocklist operate at domain/path granularity for page navigation, not at HTTP method level; no method-scoped egress rule is documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://kernel.sh/docs/api-reference/browser-processes/exec-a-command",
   "quote": "a Kernel browser is a unikernel VM with no shared host kernel — root inside your session has no path to other customers or platform infrastructure",
   "note": "derived: full VM with root=true inside a real Linux process environment; nftables/iptables are not explicitly documented but expected to work given root shell access.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": true,
   "source": "https://kernel.sh/docs/proxies/isp",
   "quote": "every connection in a session exits through the same static IP — making them ideal for login flows and session-based workflows.",
   "note": "Available via Kernel's ISP proxy (or BYO custom proxy on Start-Up/Enterprise), not as a default per-machine egress IP.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://www.kernel.sh/pricing",
   "quote": "Headless / Headful Chromium browsers on Linux unikernels",
   "note": "not offered: outside the product's scope. Kernel only offers Linux-based Chromium browser VMs; the only 'windows' string in the docs refers to residential-proxy OS geo-targeting, not a Windows machine.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.kernel.sh/pricing",
   "quote": "Headless / Headful Chromium browsers on Linux unikernels",
   "note": "not offered: outside the product's scope. No macOS machine option; the only 'macOS' mentions are local CLI install instructions and residential-proxy OS targeting.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://kernel.sh/docs/info/unikernels",
   "quote": "we host your app code on isolated unikernel instances, providing isolation and security.",
   "note": "not offered: outside the product's scope. Kernel is a managed SaaS that hosts the browser and app unikernels itself; no self-hosted build of the platform and no BYOC option is documented.",
   "checked": "2026-10-14"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://kernel.sh/docs/browsers/managed-auth/overview",
   "quote": "Choose from `us-east`, `eu-west`, and `ap-southeast`. Region selection is available on Start-Up and Enterprise plans",
   "note": "eu-west region is offered for browsers (Start-Up/Enterprise plans; Free/Hobbyist are US-only).",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://kernel.sh/docs/info/unikernels",
   "quote": "running Chromium browsers on lightweight unikernels. This architecture represents a significant departure from traditional solutions (warm pools / Kubernetes-orchestrated Docker containers)",
   "note": "not offered: outside the product's scope. Machines are minimal, single-purpose Unikraft-based unikernel VMs ('unikernels typically lack internal security boundaries... include only the necessary components to run a specific application'); no dockerd/container runtime, systemd, or general-purpose OS is documented inside the browser VM or the app-invocation runtime. Consistent with nested_virt=false already recorded on this card.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://kernel.sh/docs/browsers/termination",
   "quote": "If you don't manually delete a browser, it will be automatically deleted after a configurable `timeout` (default 60 seconds). The timeout begins once the browser enters standby... You can set a custom timeout of up to 72 hours when creating a browser",
   "note": "The only documented auto-stop is an idle/standby deletion timer (default 60 s, configurable up to 259200 s = 72 h), and that countdown only starts once the browser has been inactive for 5 s (no CDP/WebDriver/Live View/computer-controls activity). A continuously-driven session ('A browser stays alive as long as something is driving it') has no documented absolute lifetime cap, so effectively it runs until you stop it, like a VM. GPU browsers additionally don't support standby and are 'billed until deleted' with no published hour cap either.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://api.onkernel.com/spec.json",
   "quote": "GET /org/limits returns organization's effective limits and current concurrency; Browser objects contain usage.uptime_ms (active runtime only); no endpoint exposes historical billable usage per sandbox/project/tag",
   "note": "granularity: account-only; cost: no; Kernel tracks usage internally (browser uptime, billing rates per GB-second) and displays it in the dashboard (dashboard.onkernel.com), but the public API does not expose an endpoint to retrieve billable usage, cost data, or usage broken down by resource ID, tag, label, or project. SearchUsage.cost exists only for the Search API, not browser billing.",
   "confidence": "medium",
   "checked": "2026-10-01"
  },
  "byoc": {
   "value": false,
   "source": "https://www.kernel.sh/pricing",
   "quote": "custom (byo) proxies",
   "note": "not offered: no BYOC / deploy-into-your-cloud option on the pricing page, the docs pricing page (https://kernel.sh/docs/info/pricing) or anywhere in the docs (https://kernel.sh/docs/llms-full.txt). The only bring-your-own item is BYO proxies (Start-Up/Enterprise). Kernel hosts the browsers itself.",
   "checked": "2026-10-14"
  }
 },
 "locations": [
  {
   "country": "US",
   "state": null,
   "city": null,
   "provider_region": "us-east",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "IE",
   "state": null,
   "city": null,
   "provider_region": "eu-west",
   "self_serve": true,
   "choosable": true
  },
  {
   "country": "SG",
   "state": null,
   "city": null,
   "provider_region": "ap-southeast",
   "self_serve": true,
   "choosable": true
  }
 ],
 "locations_source": "https://kernel.sh/docs/browsers/regions",
 "locations_quote": "Choose from `us-east`, `eu-west`, and `ap-southeast`. Region selection is available on [Start-Up and Enterprise plans]",
 "locations_checked": "2026-10-01"
}