{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": true,
  "fork": true,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": true,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": true,
  "browser_and_desktop": true,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": null,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": null,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu": false,
  "arm64": false,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": true,
  "scheduled_wakeups": true,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": true,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": true,
  "snapshot_on_demand": true,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": true,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": true,
  "kernel_features": true,
  "burst": null
 },
 "company": {
  "id": "maritime",
  "checked": "2026-09-30",
  "company": "Maritime",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/maritime",
   "quote": "The managed cloud for AI agents. Founded in 2026 by Maria Gorskikh and Aryaman Shrivastava, Maritime has 3 employees based in San Francisco."
  },
  "stage": {
   "value": "pre-seed",
   "source": "https://www.ycombinator.com/companies/maritime",
   "quote": "Active; Batch: Fall 2026",
   "confidence": "medium",
   "note": "Maritime (maritime.sh) is the same company as the YC directory listing at https://www.ycombinator.com/companies/maritime: the YC page's site link points to https://maritime.sh/ and maritime.sh's own homepage links back to that exact YC page under 'Backed by Y Combinator'. Founders Maria Gorskikh (CEO) and Aryaman Shrivastava (CTO), founded 2026, 3 employees, San Francisco, status Active, batch Fall 2026 (a current/upcoming YC batch as of the 2026-09-30 check date). No priced round beyond the YC deal itself was found in the time budget, so stage is inferred as pre-seed (typical for a company in its own current YC batch); the exact YC investment amount (standard deal) is not disclosed on the pages reviewed."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Fall 2026",
    "source": "https://www.ycombinator.com/companies/maritime",
    "quote": "Co-founder and CTO at Maritime (YC F26).",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "https://www.ycombinator.com/companies/maritime",
   "quote": ""
  },
  "investors": [
   "Y Combinator"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 3,
   "source": "https://www.ycombinator.com/companies/maritime"
  },
  "note": "Very early-stage company: founded 2026, currently in YC's Fall 2026 (F26) batch, 3 employees, based in San Francisco. Founders Maria Gorskikh (CEO, ex-MIT visiting lecturer / NANDA researcher) and Aryaman Shrivastava (CTO, ex-MIT NANDA Lab researcher on AI agent coordination). No priced funding round, investor list beyond YC, or revenue figures were publicly disclosed in the sources reviewed; a buyer should treat this as a pre-seed, YC-backed startup with no independently verified funding total."
 },
 "id": "maritime",
 "name": "Maritime",
 "url": "https://maritime.sh/pricing",
 "category": "agent-sandbox",
 "isolation": "firecracker",
 "modes": [
  {
   "key": "included-agent-machine",
   "label": "Included agent machine",
   "flags": [],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "desktop": false,
    "isolation": "firecracker"
   },
   "pricing": "sizes",
   "sizes": [
    {
     "name": "Included agent machine",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 5,
     "hour": 0,
     "month_cap": null
    }
   ],
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Base persistent agent; no runtime time meter. Optional screen pricing not separately published."
  },
  {
   "key": "computer-desktop-early-access",
   "label": "Computer desktop early access",
   "flags": [
    "beta"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {
    "desktop": true,
    "computer_use": true,
    "isolation": "firecracker"
   },
   "pricing": "sizes",
   "sizes": [
    {
     "name": "Computer desktop early access",
     "vcpu": 1,
     "ram_gib": 2,
     "disk_gib": 5,
     "hour": 0,
     "month_cap": null
    }
   ],
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Paid account required; same machine slot economics. Early-access product."
  }
 ],
 "storage": {
  "included_disk_gib": 5,
  "disk_gib_month": 0.4,
  "disk_billed_when_stopped": true,
  "snapshot_gib_month": 0,
  "paused_ram_billed": false
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Free agents only",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": 1,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": [
    "Included agent machine"
   ],
   "note": "3 retained agents, not Computers."
  },
  {
   "name": "Starter",
   "fee": 20,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": 5,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "20 retained machines; extra $1.50/machine-month; Computers allowed."
  },
  {
   "name": "Growth",
   "fee": 100,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": 25,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "100 retained machines; extra $1.25/machine-month."
  },
  {
   "name": "Scale",
   "fee": 500,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": 60,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "500 retained machines; extra $1/machine-month."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Custom limits, add-on rates and fleet."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": false,
  "gpu": false,
  "snapshot": "mem",
  "pause_resume": true,
  "fork": true,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": true,
  "systemd": null,
  "browser": true,
  "desktop": true,
  "computer_use": true,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": null,
  "private_network": null,
  "self_host": false,
  "byoc": false,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": false,
  "gpu_types": [],
  "regions": null,
  "browser_control": null,
  "desktop_control": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": null,
  "ip_note": "Egress IPs/proxies not documented; CAPTCHAs and logins are handed to a human via request_takeover control links (Computers require a paid plan).",
  "isolation": "firecracker",
  "image_oci": true,
  "webhooks": true,
  "scheduled_wakeups": true,
  "wake_on_request": true,
  "scoped_api_keys": true,
  "mcp_server": true,
  "snapshot_auto": true,
  "harness_api": true,
  "ingress_rules": true,
  "guest_firewall": true,
  "secret_proxy": "ai-only",
  "volume_attach": false,
  "volume_shared": false,
  "snapshot_on_demand": true,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "live_resize": false,
  "own_agent_api": false,
  "lang_python": true,
  "lang_node": true,
  "egress_http_rules": false,
  "eu_data_residency": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": 500,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Storage, snapshot GiB-month and public IPv4 prices are not published in the reviewed sources; null is not free.",
  "The $1/machine headline assumes fully occupied plan slots, not 24×7 concurrency for every retained machine. Base CPU is 1; CLI documents --cpu overrides but no price or public ceiling for 4 CPU.",
  "No active-CPU discount: hosting is flat. Always-on adds $20 even though busy workloads already avoid automatic sleep.",
  "Documentation inconsistency: billing prose says all 3 free agents can run, while pricing and limits tables say 1; use table limit 1 and confirm. Computers are early access and require a paid plan.",
  "Engine base mode cannot price extra retained slots, per-machine RAM/disk add-ons or always-on; do not pool 1-CPU machines into a 4-CPU machine. $5 AI welcome credit is not compute credit.",
  "Plan caps (maritime.sh/docs/limits, checked 2026-09-29): awake-at-once machines Free 1 / Starter 5 / Growth 25 / Scale 60; machines Free 3 / Starter 20 / Growth 100 / Scale 500. Each machine is 1 vCPU / 2 GB / 5 GB SSD; flat add-ons per machine-month: extra RAM $3 / $2.50 / $2 per GB (Starter/Growth/Scale, up to 8 GB), extra SSD $2 / $1.50 / $1 per 5 GB (up to 100 GB), always-on $20; add-ons prorated by day, not available on Free. Workloads needing >60 awake machines or >1 vCPU per machine have no self-serve price (Enterprise is custom).",
  "Billing is a flat monthly plan with no compute-time metering (\"There is no metering of messages, tokens, sessions, or compute time\", maritime.sh/pricing); the $0 hourly size rate is the encoding of that, the bill is the plan fee.",
  "Students: live /students page and llms.txt give 3 months of Growth free (100 machines, normally $100/mo), code valid on Growth only; the pricing-page FAQ still says 4 months of Starter (stale). Startups: $1,000 credits on acceptance, then $1,000 matched per $1,000 spent up to $5,000 ($10,000 via partner accelerator/fund); credits spend on hosting, LLM usage and add-ons. $5 AI welcome credit (model calls only) expires 30 days after signup.",
  "Plan fee is a flat floor, not usage credit; 'Unused plan capacity doesn't roll over.' Subscription is charged up-front each cycle; extra machine slots stay billed to cycle end even if the agent is deleted. Failed renewal: 14-day grace, then machines are put to sleep (state kept).",
  "Computers are 'a larger machine with a screen, and the screen alone is a paid add-on on an agent' but the Computer's vCPU/RAM and the screen add-on price are unpublished; the computer mode's 1 vCPU/2 GB/5 GB size is an assumption. CLI accepts --cpu (e.g. 1.5 vCPU) with no published price or ceiling."
 ],
 "sources": [
  "https://maritime.sh/pricing",
  "https://maritime.sh/llms.txt",
  "https://maritime.sh/docs/billing",
  "https://maritime.sh/docs/computers",
  "https://maritime.sh/docs/configuration",
  "https://maritime.sh/docs/limits",
  "https://maritime.sh/docs/how-it-works",
  "https://maritime.sh/docs/frameworks",
  "https://maritime.sh/docs/web-apps"
 ],
 "fleet": {
  "default_max_instances": 1,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": "self-serve",
  "raise_time_days": 0,
  "verification": "Free no card; paid-plan checkout requires card.",
  "tiers": "Free 1 awake agent (3 retained); Starter 5 awake/20 retained; Growth 25/100; Scale 60/500; Enterprise custom.",
  "notes": "Machines include agents and Computers; Free cannot use Computers (0 free computer slots). default 1 is the managed agent machine. 10 agents fit Growth, 50 Scale, 300/1,000 require Enterprise. Upgrades effective immediately. Computers API rate limits: 30 creates, 300 actions and 30 viewer links per minute per key; a wake past the plan's awake-at-once cap returns 429 with a 15 s retry hint; creating machines past the included count is allowed and bills as overflow ($1.50/$1.25/$1.00 per machine-month). A separate 'persisted-computer cap' exists (402 computer_limit, 'ask for a higher cap'), number unpublished.",
  "sources": [
   "https://maritime.sh/docs/limits",
   "https://maritime.sh/pricing"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 10,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": true,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "On micro-VM hosts the process is snapshotted and resumed, not restarted.",
   "note": "Trigger: idle timeout (configurable --idle / idleTtlSeconds; Computers sleep after 5 idle minutes or 30 s after close_computer). Memory included: Computers docs say 'After 5 idle minutes the desktop sleeps: memory is snapshotted, open windows and all.' Memory snapshot kept 7 days after last action; after that it wakes from a fresh boot with the same disk. Wake is automatic on chat/trigger/HTTP/file/exec calls (~1.1-1.4 s). Caveat: 'On micro-VM hosts' implies non-microVM hosts restart processes instead.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": true,
   "source": "https://maritime.sh/docs/sdk/agents",
   "quote": "Send a message and wait for the reply. Sleeping agents wake automatically. Pass a conversationId to keep a thread.",
   "note": "First-party REST (POST /api/agents/{id}/chat with optional conversation_id), CLI (maritime chat) and TS/Python SDKs (agents.chat) deliver prompts to the agent harness running in the VM and return its reply. Templates: Claude Code (Claude Agent SDK; docs: 'Each conversation_id resumes its own Claude Code session'), Codex CLI, OpenClaw, Hermes, ZeroClaw, DeepSeek Harness, or any custom container implementing POST /chat. Request/response only (30 s delivery budget, long tasks reply on next message); no event streaming or conversation-list API documented. Logs streaming exists separately (maritime logs -f).",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://maritime.sh/docs/web-apps",
   "quote": "Serve a public, no-login web URL for this agent",
   "note": "Public HTTPS URL is opt-in per agent (--public with a chosen --port); otherwise the agent is reached through the authenticated control plane (chat API with mk_ bearer keys, scoped keys) and a per-agent invoke URL that takes an X-Maritime-Webhook-Token (tokenless calls 'being phased out'). Computers' viewer/takeover links are short-lived and bound to one computer and mode. No IP allowlists or auth in front of a public URL (public = no-login).",
   "checked": "2026-09-29"
  },
  "guest_firewall": {
   "value": true,
   "source": "https://maritime.sh/blog/ai-agent-security-best-practices",
   "quote": "Its own dedicated container. On serverless hosts, its own Firecracker microVM with its own guest kernel and a minimal virtio device model",
   "note": "Derived: containers run as root (Claude Code guide) inside a per-agent Firecracker microVM with its own guest kernel, so nftables/iptables should work; not explicitly documented, and whether the container gets CAP_NET_ADMIN is not stated.",
   "checked": "2026-09-29",
   "derived": true
  },
  "secret_proxy": {
   "value": "ai-only",
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "Agents created without a key get a per-agent token for Maritime's OpenAI-format proxy and draw down your prepaid AI credits at provider list price.",
   "note": "Maritime LLM proxy: OPENAI_API_KEY/OPENAI_BASE_URL point at Maritime's metered proxy with a per-agent token (Codex docs: 'With no key set, Maritime injects a per-agent proxy token.'); covers model calls only (OpenAI-format / Responses API; Claude Code needs its own ANTHROPIC_API_KEY, 'no proxy fallback'). All other secrets (including your own LLM keys) are AES-256-GCM encrypted env vars injected into the VM, so they are visible inside it. No arbitrary-HTTP or non-HTTP credential injection.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "A persistent volume, mounted at /data for most templates. This is the agent's memory: it survives restarts, redeploys, and sleep/wake. Everything outside it is disposable.",
   "note": "Each machine has exactly one persistent volume (/data), sized 5 GB base up to 100 GB via the flat Extra SSD add-on ($2/$1.50/$1 per 5 GB-month). That is the machine's own persistent disk, not an extra attachable volume; no API to create/attach additional volumes.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://maritime.sh/blog/ai-agent-security-best-practices",
   "quote": "Its own persistent volume, with no shared filesystem between agents",
   "note": "Deliberately no shared filesystem between agents (official Maritime blog). File transfer is via the Files API (100 MB per file).",
   "checked": "2026-09-29"
  },
  "docker_inside": {
   "value": false,
   "source": "https://maritime.sh/blog/ai-agent-security-best-practices",
   "quote": "Its own dedicated container. On serverless hosts, its own Firecracker microVM with its own guest kernel and a minimal virtio device model",
   "note": "derived: an agent is one container process in a Firecracker microVM; no docs describe a docker daemon or nested containers running inside that guest",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://maritime.sh/blog/ai-agent-security-best-practices",
   "quote": "Its own dedicated container. On serverless hosts, its own Firecracker microVM with its own guest kernel and a minimal virtio device model",
   "note": "derived: single-process container inside a microVM guest; /dev/kvm passthrough for nested VMs/emulators is not documented",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://maritime.sh/docs/computers",
   "quote": "If you reach a login, CAPTCHA or payment step, call request_takeover with a short reason and show the user the link it returns",
   "note": "not offered: CAPTCHAs/logins are escalated to a human via takeover links rather than solved by stealth/fingerprint evasion; no anti-bot feature documented",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://maritime.sh/docs/api",
   "quote": "Run a one-shot, non-interactive shell command in the agent's VM (its sandboxed container). Wakes a sleeping agent.",
   "note": "not offered: the documented ways into a running agent are chat, the exec API/CLI (one-shot commands), and file APIs; no SSH access, key, or port is documented anywhere (CLI reference, API reference)",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://maritime.sh/docs/limits",
   "quote": "Template capture\tUsually 1 to 10 minutes (snapshots the image and volume)",
   "note": "Packaging a running agent into a Template snapshots its image and volume on demand (dashboard-triggered); no separate lower-level 'checkpoint now' CLI/API verb is documented",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": true,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "Templates are also how you share. Package any working agent (image, config, memory) into a template others can clone: see Templates.",
   "note": "an existing agent can be packaged as a Template and cloned into new independent agents",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://maritime.sh/docs/limits",
   "quote": "Template capture\tUsually 1 to 10 minutes (snapshots the image and volume)",
   "note": "derived: template capture takes 1-10 minutes and its interaction with a currently-running agent is not documented; no claim that cloning happens without pausing/affecting the source agent",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "A persistent volume, mounted at /data for most templates. This is the agent's memory: it survives restarts, redeploys, and sleep/wake.",
   "note": "derived: Maritime's docs use 'memory' to mean the persistent /data volume, not live process/RAM state; template clones start a fresh container from that data, not a running-process fork",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://maritime.sh/docs/configuration",
   "quote": "Agents that need more can be sized up to 8 GB RAM and 100 GB SSD at creation or later from the agent's settings, at flat monthly add-on prices",
   "note": "no CLI/API 'resize' verb is documented and env/config changes explicitly note they 'apply on the agent's next boot unless you push them into the running container with --reload'; resource resizing is not shown to apply without a restart",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://maritime.sh/docs/computers",
   "quote": "A persistent Linux desktop (XFCE, Chromium, LibreOffice) for each of your end users, driven by your model.",
   "note": "not offered: outside the product's scope. Maritime hosts YOUR agent/model driving the desktop or chat; it does not offer its own first-party browser/computer-use/research agent that customers call as a black box",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://maritime.sh/docs/frameworks",
   "quote": "Hermes\thermes\tPython\tA self-improving agent with persistent memory and its own full dashboard",
   "note": "Hermes template runtime is Python; custom Docker images can also ship any Python runtime",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://maritime.sh/docs/frameworks",
   "quote": "Claude Code\tclaude_code\tNode.js (Claude Agent SDK)\t... Codex\tcodex\tNode.js (Codex CLI) ... OpenClaw\topenclaw\tNode.js",
   "note": "Claude Code, Codex, OpenClaw and DeepSeek Harness templates all run on Node.js; the CLI itself requires Node.js 20.12+",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://maritime.sh/docs/web-apps",
   "quote": "Any repo with a Dockerfile can be served on a public, no-login HTTPS URL.",
   "note": "not offered: machines are reached through HTTPS invoke/public URLs and a chat/webhook API, not a per-machine public IPv4 address; no IPv4 allocation is documented",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "No key: the Maritime LLM proxy. ... Your own key: direct. Set OPENAI_API_KEY ... and the agent talks to the provider directly",
   "note": "not offered: the only outbound control documented is an optional LLM-call proxy for model traffic; no allow/deny list, no-internet mode, or security-group-style egress control is documented",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "No key: the Maritime LLM proxy. ... Your own key: direct.",
   "note": "not offered: no method/path-level egress rule feature is documented anywhere in the docs; only the model-call proxy is mentioned",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "EVERY AGENT\tVCPU 1\tRAM 2 GB\tSSD 5 GB\tWAKE ~1s",
   "note": "not offered: outside the product's scope. Every plan/size in the pricing and limits pages lists only vCPU/RAM/SSD; no GPU machine or GPU add-on exists",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://maritime.sh/blog/ai-agent-security-best-practices",
   "quote": "On serverless hosts, its own Firecracker microVM with its own guest kernel",
   "note": "not offered: outside the product's scope. Firecracker microVMs run Linux guest kernels; every template, Computer desktop (XFCE/Chromium) and doc is Linux-only",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://maritime.sh/docs/how-it-works",
   "quote": "An agent is a long-lived program running in its own isolated VM (a sandboxed container)",
   "note": "not offered: outside the product's scope; a Linux Firecracker-microVM hosting product, no Apple hardware/macOS VM is offered",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": false,
   "source": "https://maritime.sh/docs/configuration",
   "quote": "--cpu (vCPUs), e.g. 0.5 or 2 (per-agent override)",
   "note": "not documented: no architecture choice (x86_64 vs arm64) appears anywhere in pricing, CLI, or API docs; treated as not offered",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "Host persistent agents on the cloud. Each one in its own VM.",
   "note": "not offered: outside the product's scope. Maritime is a hosted SaaS platform; there is no self-hosted/on-prem distribution of the platform itself (only client SDK/CLI code is open on GitHub)",
   "checked": "2026-09-30"
  },
  "byoc": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "Host persistent agents on the cloud. Each one in its own VM.",
   "note": "not offered: outside the product's scope; no bring-your-own-cloud deployment option is documented, including on the Enterprise tier",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://github.com/maritime-sh",
   "quote": "maritime-sdk: Official TypeScript + Python SDKs for Maritime — provision and drive AI agents from your own backend (MIT)",
   "note": "the client SDK and CLI are MIT-licensed on GitHub, but the core hosting platform/runtime is closed-source; no repo for the platform itself",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "Enterprise support is dedicated, with terms set in your agreement.",
   "note": "not offered: no SOC 2 attestation, trust page, or compliance page exists anywhere on maritime.sh (checked pricing, docs, blog); Enterprise terms are only 'set in your agreement'",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "Enterprise support is dedicated, with terms set in your agreement.",
   "note": "not offered/not documented: no HIPAA or BAA mention anywhere on the site",
   "checked": "2026-09-30"
  },
  "sso": {
   "value": false,
   "source": "https://maritime.sh/docs/cli",
   "quote": "Sign in with Google or GitHub? You have no password, so use the browser flow, or paste a token from maritime.sh/cli/auth",
   "note": "account login supports Google/GitHub OAuth for individual users, but no SAML/OIDC enterprise SSO is documented anywhere",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://maritime.sh/pricing",
   "quote": "the network round-trip, which is tens of milliseconds in Europe and under 200 ms from most of the world",
   "note": "not documented: no region selection appears in the CLI, API, or pricing docs (single implicit deployment), so there is no way to pin machines/data to an EU region",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://maritime.sh/docs/billing",
   "quote": "Always-on is for agents that must react in milliseconds, around the clock; everything else sleeps when idle at no cost.",
   "note": "no maximum runtime/session length is documented; an always-on agent (or one kept awake by continuous requests) runs indefinitely. The only caps are on how many machines may be awake at once, not how long any one machine may run",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://maritime.sh/docs/billing",
   "quote": "There is no metering of messages, tokens, sessions, or compute time.",
   "note": "granularity: none; cost: no; Flat monthly plan with no usage-based billing. The Computers API lists a /api/v1/computers/usage endpoint but it is undocumented and does not expose billable usage per-sandbox; billing is account-wide flat pricing only.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://maritime.sh/pricing",
 "locations_quote": "Host persistent agents on the cloud. Each one in its own VM.",
 "locations_checked": "2026-10-01"
}