{
 "features_resolved": {
  "snapshot_any": true,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": true,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": true,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu": true,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": true,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "okteto",
  "checked": "2026-09-30",
  "company": "Okteto, Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/okteto",
   "quote": "Okteto Cloud Development Environments with one click WINTER 2019 ACTIVE"
  },
  "stage": {
   "value": "series-a",
   "source": "https://techcrunch.com/2022/02/24/kubernetes-development-platform-okteto-raises-15m-series-a/",
   "quote": "Okteto ... today announced that it has raised a $15 million Series A funding round.",
   "confidence": "high",
   "note": "Last priced round found is the Feb 2022 $15M Series A led by Two Sigma Ventures; no later round (Series B or beyond) has been reported."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Winter 2019",
    "source": "https://www.ycombinator.com/companies/okteto",
    "quote": "Batch: Winter 2019",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": 15000000,
   "status": "confirmed",
   "basis": "TechCrunch-confirmed $15M Series A (Feb 2022); an earlier, presumably smaller seed round existed (existing investors Haystack, Root Ventures and Uncorrelated Ventures are described as pre-Series-A backers) but its amount was never disclosed, so it is not added to the total.",
   "source": "https://techcrunch.com/2022/02/24/kubernetes-development-platform-okteto-raises-15m-series-a/",
   "quote": "The round was led by Two Sigma Ventures, with existing investors Haystack, Root Ventures and Uncorrelated Ventures also participating"
  },
  "last_round": {
   "type": "series-a",
   "amount_usd": 15000000,
   "date": "2022-02",
   "leads": [
    "Two Sigma Ventures"
   ],
   "status": "confirmed",
   "source": "https://techcrunch.com/2022/02/24/kubernetes-development-platform-okteto-raises-15m-series-a/",
   "quote": "Kubernetes development platform Okteto raises $15M Series A ... The round was led by Two Sigma Ventures"
  },
  "investors": [
   "Two Sigma Ventures",
   "Haystack",
   "Root Ventures",
   "Uncorrelated Ventures",
   "John Kodumal (LaunchDarkly founder/CTO)",
   "Grant Miller (Replicated co-founder)",
   "Marc Campbell (Replicated co-founder)",
   "Dan Pinto (FingerprintJS founder/CEO)",
   "Erica Brescia (Bitnami founder)",
   "Florian Leibert (Mesosphere founder)",
   "Y Combinator"
  ],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 30,
   "source": "https://www.ycombinator.com/companies/okteto"
  },
  "note": "YC company page confirms the same okteto.com domain, batch Winter 2019, status Active, founded 2018, team size 30 (YC page figure, likely dated). Founders: Ramiro Berrelleza (CEO), Pablo Chico de Guzman (CTO), Ramon Lamana (CPO). No funding news found after the Feb 2022 Series A; no evidence of shutdown, pivot, or acquisition — appears to be an operating independent company as of check date."
 },
 "id": "okteto",
 "name": "Okteto",
 "url": "https://okteto.com",
 "category": "dev-env",
 "isolation": "container",
 "modes": [
  {
   "key": "native",
   "label": "Native product; see regime notes",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Okteto sells a per-seat platform licence (annual contract) that runs on the customer's own Kubernetes cluster (Self-Hosted Helm chart or Okteto-managed BYOC in the customer's AWS/GCP account). Okteto does not sell compute; CPU/RAM/disk/egress are billed by the customer's cloud. Rates stay null by design."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Starter",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 0,
   "concurrency": null,
   "max_session_h": null,
   "note": "Free for up to 5 seats; Self-Hosted only (Free Tier license key by form); no BYOC, no SOC2, no SSO/RBAC, no garbage collector/resource manager. Customer supplies and pays for the Kubernetes cluster."
  },
  {
   "name": "Scale",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "per_seat": null,
   "note": "Per seat, billed annually; price not published. Adds catalog, resource manager, garbage collection, RBAC, SSO (GitHub/Google), SOC2, ticket support + SLA. Self-hosted only (no BYOC)."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "per_seat": null,
   "note": "Per seat, annual; multi-cluster/floating licence counts unique seats across fleet; BYOC, OIDC, air-gapped, GitOps control. Also via Google Cloud Marketplace / AWS Marketplace."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null,
  "conditions": "Free Tier licence key emailed after self-hosted form (https://www.okteto.com/free-trial/); Free Tier licence only works with Self-Hosted. BYOC free access only via sales demo."
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": true,
  "snapshot": "fs",
  "pause_resume": true,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": true,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": true,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": true,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": null,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": true,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": false,
  "snapshot_auto": false,
  "snapshot_on_demand": true,
  "harness_api": false,
  "egress_allowlist_level": "ip",
  "ingress_rules": true,
  "secret_proxy": false,
  "volume_attach": true,
  "volume_shared": true,
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "egress_ip_type": "datacenter",
  "own_agent_api": false,
  "guest_firewall": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Starter free (5 seats, self-hosted only). Scale/Enterprise: per-seat, annual contract, contact sales; seats = unique human user accounts (agents/bots/environments not counted); overages trued-up pro-rata at contracted rate, no hard cap. Compute always runs on and is billed by the customer's own Kubernetes cluster (Self-Hosted or BYOC on AWS/GCP); no Okteto-hosted compute tariff exists.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/okteto",
  "https://www.okteto.com/",
  "https://www.okteto.com/pricing/",
  "https://www.okteto.com/docs",
  "https://www.okteto.com/llms.txt"
 ],
 "audit_2026_09_29": {
  "applied": 13,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 5
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://www.okteto.com/docs/admin/cleanup.md",
   "quote": "Kubernetes Deployments (replicas set to 0, so that pods are deleted but the deployment config remains)",
   "note": "Garbage-collector 'sleep' (idle period, default 3h) scales workloads to zero and deletes pods; 'Persistent Volume Claims (PVCs) and their data' are preserved. That is persistent_disk, not a state snapshot; no memory/process state kept.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": true,
   "source": "https://www.okteto.com/docs/core/use-volume-snapshots.md",
   "quote": "Okteto Volume Snapshots allow you to initialize Persistent Volume Claims (PVCs) with data from a previously created snapshot.",
   "note": "PVC-level (disk only, no memory) via Kubernetes VolumeSnapshot objects; new environments/namespaces can restore PVCs from it via dev.okteto.com/from-snapshot-name annotation. Needs CSI snapshot driver on self-hosted; BYOC uses csi-okteto storage class.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://www.okteto.com/docs/agentic.md",
   "quote": "The [Okteto plugin for Claude Code](https://github.com/okteto/okteto-agent-skills) packages that knowledge as agent skills",
   "note": "Current 'Agentic Workflows' = skills/plugin for an agent running outside (IDE/CI) that calls the Okteto CLI. The former 'Okteto AI' (ex 'AI Agent Fleets', beta Sept 2025, Claude Code per namespace driven from a dashboard UI) appears discontinued: release 1.48.0 (Sep 2026) says 'The `oktetoAI` and `prepullImages.includeAgent` settings have been removed from the Okteto Chart'. No documented API for it even when it existed.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": true,
   "source": "https://www.okteto.com/docs/self-hosted/helm-configuration.md",
   "quote": "`egress`: Egress list of rules (NetworkPolicyEgressRule) to be applied on every namespace managed by Okteto (optional).",
   "note": "Kubernetes NetworkPolicy (ipBlock CIDR + ports), admin-level Helm config applied to every Okteto namespace, 'Disabled by default'; enforced by the cluster CNI outside the container. Not per-sandbox and no hostname rules. Customer can additionally run their own policy tooling on their own cluster.",
   "checked": "2026-09-29",
   "level": "ip"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://www.okteto.com/docs/core/endpoints/private-endpoints.md",
   "quote": "Private endpoints can only be accessed by Okteto users who have access to your Okteto namespace, and they'll need to provide their credentials before being granted access.",
   "note": "Endpoints are public by default; annotation dev.okteto.com/auto-ingress: \"private\" makes them Okteto-auth protected. Admins can also set NetworkPolicy ingress rules (ipBlock/namespace/pod selectors) per namespace via Helm networkPolicies.ingress.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://www.okteto.com/docs/core/okteto-variables.md",
   "quote": "Okteto Variables are a way to parametrize your [Okteto manifest](/docs/reference/okteto-manifest.md) and the deploy, destroy and test strategy.",
   "note": "Secrets are Okteto Variables (admin/user/catalog), env vars and Kubernetes secrets; no credential-injecting proxy documented. New x-okteto-identity-token projects an OIDC ServiceAccount token into the container (workload identity), which is not a proxy.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "A list of persistent volume claims (not managed by Okteto) that you want to mount in your development container.",
   "note": "Any Kubernetes PVC (externalVolumes) plus the Okteto dev volume (persistentVolume, default 5Gi, configurable size/storageClass/accessMode).",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "This is useful to share cache information between different development containers.",
   "note": "Same external PVC mounted by several dev containers; simultaneous read-write needs a ReadWriteMany-capable storage class on the customer's cluster (default dev volume access mode is ReadWriteOnce).",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Code runs in actual Kubernetes pods, with the production-like runtime, network policies, and access controls that apply there.",
   "note": "Okteto namespaces are Kubernetes namespaces; workloads run as standard Kubernetes pods (shared kernel), isolated by Kubernetes RBAC/NetworkPolicy rather than a hypervisor. Matches card's existing top-level isolation field.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "build: Instructions to build docker images (optional).",
   "note": "Dev/test/preview containers run from images built by the Okteto Manifest 'build' phase or from any existing OCI image reference; matches card's custom_image=true.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://www.okteto.com/docs/core/build-service.md",
   "quote": "By default, running privileged containers is not allowed in Red Hat OpenShift. This restriction affects the Okteto Build service.",
   "note": "Okteto's own remote builds use a privileged BuildKit service account, not a capability exposed to run Docker/DinD inside a regular dev container; no docs describe docker-in-docker inside dev/preview/test pods, which run as normal (non-privileged) Kubernetes pods by default.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Code runs in actual Kubernetes pods, with the production-like runtime, network policies, and access controls that apply there.",
   "note": "not offered: outside the product's scope — dev/preview/test containers are standard Kubernetes pods; no /dev/kvm or nested-virtualization capability is documented.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is a development environment platform, not a production hosting platform or PaaS.",
   "note": "not offered: outside the product's scope — Okteto provisions Kubernetes dev/preview/test/agent namespaces for code, not a graphical desktop/VNC/RDP surface.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is a development environment platform, not a production hosting platform or PaaS.",
   "note": "not offered: outside the product's scope. The only browser reference in the docs is a Playwright container in a sample e2e test app, not a managed browser feature.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is a development environment platform, not a production hosting platform or PaaS.",
   "note": "not offered: outside the product's scope — no screenshot/click driving API for a desktop.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is a development environment platform, not a production hosting platform or PaaS.",
   "note": "not offered: outside the product's scope — no browser/stealth-fingerprinting feature exists.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is a development environment platform, not a production hosting platform or PaaS.",
   "note": "not offered: outside the product's scope — no browser automation product surface.",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Available as SaaS, self-hosted, or Bring Your Own Cloud.",
   "note": "Traffic egresses from whichever Kubernetes cluster runs the workload (customer's own AWS/GCP account or on-prem), i.e. standard cloud/datacenter IP ranges; no residential/mobile IP product exists.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/ssh-server.md",
   "quote": "A minimalist SSH server is injected into your development container ... You can also SSH using the host entry added to your local SSH config: ssh MANIFEST_NAME.okteto",
   "note": "SSH is tunneled through okteto up's local port-forward, not a directly routable SSH endpoint, but the machine is reachable and controllable via SSH as documented.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://www.okteto.com/docs/core/use-volume-snapshots.md",
   "quote": "Okteto Volume Snapshots allow you to initialize Persistent Volume Claims (PVCs) with data from a previously created snapshot.",
   "note": "Okteto can create a NEW namespace/environment seeded from a prior PVC's disk snapshot, or re-deploy the same manifest into a new namespace (per-PR previews), but there is no documented single-call 'clone this running machine' fork API/CLI command.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://www.okteto.com/docs/agentic.md",
   "quote": "The Okteto plugin for Claude Code packages that knowledge as agent skills",
   "note": "No documented capability to clone a running namespace/container without stopping it; fork is not offered so fork_running is not applicable/false.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://www.okteto.com/docs/core/use-volume-snapshots.md",
   "quote": "Okteto Volume Snapshots allow you to initialize Persistent Volume Claims (PVCs) with data from a previously created snapshot.",
   "note": "Snapshots are PVC/disk-level only (Kubernetes VolumeSnapshot); no memory/process-state capture, so no clone can resume running processes.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": true,
   "source": "https://www.okteto.com/docs/admin/cleanup.md",
   "quote": "Sleep or wake up your Namespace with `okteto namespace sleep [name]` and `okteto namespace wake [name]` commands respectively",
   "note": "A namespace can be manually put to sleep (scales workloads to zero, PVCs preserved) and woken again via CLI/dashboard, in addition to automatic idle sleep/auto-wake-on-request.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://www.okteto.com/docs/agentic.md",
   "quote": "The Okteto plugin for Claude Code packages that knowledge as agent skills",
   "note": "Okteto ships agent skills/a Claude Code plugin that teaches an externally-run agent to call the Okteto CLI inside dev/agent namespaces; it does not preinstall or offer coding-agent harnesses (Claude Code, Codex, OpenCode, etc.) as ready-to-run templates inside the environment itself.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://www.okteto.com/docs/admin/okteto-api.md",
   "quote": "Okteto API: Programmatic access to Okteto-managed resources",
   "note": "The Okteto API manages Kubernetes resources (namespaces, pipelines, previews); Okteto does not ship its own browser/computer-use/research task agent to drive via API.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": false,
   "source": "https://www.okteto.com/docs/agentic.md",
   "quote": "The [Okteto plugin for Claude Code](https://github.com/okteto/okteto-agent-skills) packages that knowledge as agent skills",
   "note": "No MCP server for controlling Okteto namespaces/sandboxes is documented; agent integration is via Claude Code skills/plugin calling the Okteto CLI, not MCP.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "command: python app.py",
   "note": "Dev containers run any custom OCI image, including standard Python runtimes; docs and sample apps (getting-started) show Python services out of the box.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://www.okteto.com/docs/tutorials/getting-started-with-okteto.md",
   "quote": "npm start",
   "note": "Dev containers run any custom OCI image, including Node.js runtimes; getting-started tutorial and samples use Node.js services.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://www.okteto.com/docs/core/endpoints/private-endpoints.md",
   "quote": "Private endpoints can only be accessed by Okteto users who have access to your Okteto namespace",
   "note": "Machines are reached via Okteto-managed HTTPS subdomain endpoints (through an Ingress controller) rather than a per-machine public IPv4 address.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://www.okteto.com/docs/core/endpoints/private-endpoints.md",
   "quote": "Private endpoints can only be accessed by Okteto users who have access to your Okteto namespace, and they'll need to provide their credentials before being granted access.",
   "note": "Okteto auto-generates HTTPS endpoints (public by default, or private/auth-gated) for exposed container ports.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://www.okteto.com/docs/self-hosted/helm-configuration.md",
   "quote": "`egress`: Egress list of rules (NetworkPolicyEgressRule) to be applied on every namespace managed by Okteto (optional).",
   "note": "Egress control is Kubernetes NetworkPolicyEgressRule (IP/CIDR block + port level), not HTTP method/path-level rules.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Code runs in actual Kubernetes pods, with the production-like runtime, network policies, and access controls that apply there.",
   "note": "Isolation is container (shared kernel via Kubernetes pods), not a full VM/microVM with guaranteed root, so the automatic guest_firewall derivation does not apply; no documentation of running nftables/iptables inside a dev container.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://www.okteto.com/docs/self-hosted/manage/network-load-balancer.md",
   "quote": "We recommend to use a NLB as it provides benefits like: websocket support, static IPs, and better performance.",
   "note": "The 'static IPs' note is about the ingress load balancer (inbound), configured by the cluster admin's own cloud infra; Okteto does not document a first-party fixed outbound/egress IP feature — egress IP depends entirely on the customer's own Kubernetes cluster/cloud network.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Code runs in actual Kubernetes pods",
   "note": "not offered: outside the product's scope — Okteto dev/preview/test containers are Linux OCI containers; no Windows container/VM offering is documented.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Code runs in actual Kubernetes pods",
   "note": "not offered: outside the product's scope — Okteto runs Linux containers on Kubernetes clusters; no macOS machine offering exists.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://www.okteto.com/docs/release-notes.md",
   "quote": "Okteto now runs in ARM architecture. This is currently in beta.",
   "note": "Later release notes confirm broader support: 'ARM support is covered by the same release pipeline as x86. All control plane images are published as multi-arch (amd64 + arm64).'",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": true,
   "source": "https://www.okteto.com/open-source",
   "quote": "Okteto CLI, docs, VS Code extension, Docker Desktop extension, and upstream contributions",
   "note": "The Okteto CLI (client that drives dev environments) is open source (Apache-2.0, github.com/okteto/okteto); the managed control-plane/Helm chart platform itself is not open source, so this is a partial/component-level open-source answer.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://www.okteto.com/security/",
   "quote": "SOC2 Type 2 Compliant",
   "note": "Only SOC 2 Type 2 is advertised on the security/trust page; no mention of HIPAA eligibility or BAA availability anywhere in docs, security page, or pricing/plan comparisons.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://www.okteto.com/llms.txt",
   "quote": "Okteto is installed and run entirely in your own infrastructure ... Bring Your Own Cloud (BYOC) — Okteto-managed, running in your cloud account. Supported on AWS and GCP.",
   "note": "Because Self-Hosted and BYOC deployments run entirely inside the customer's own Kubernetes cluster/cloud account, the customer can choose an EU region/cluster, achieving EU data residency; this is a property of the deployment model rather than an Okteto-managed SaaS region selector.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://www.okteto.com/docs/admin/cleanup.md",
   "quote": "Sleep Period: The amount of time, in hours, that an environment must remain idle before the GC scales it down to zero",
   "note": "No fixed maximum session/runtime duration is documented; environments run indefinitely while active and are only scaled to zero after a configurable IDLE period (default 3h), not a hard session-length cap.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "resources (object, optional) Allows you to override the resources configuration of your development container. It follows the same syntax used in Kubernetes",
   "note": "CPU/RAM for a dev container are set via the manifest's `resources.requests`/`resources.limits` (standard Kubernetes fields), changed by editing the manifest and redeploying (`okteto up`/`okteto deploy`), which recreates the pod. No API/CLI to change a running container's CPU/RAM allocation in place is documented; Kubernetes itself only offers in-place pod vertical resize as an opt-in alpha/beta feature that Okteto's docs never mention using.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": true,
   "source": "https://www.okteto.com/docs/reference/okteto-manifest.md",
   "quote": "tolerations: - key: nvidia.com/gpu operator: Exists",
   "note": "Okteto lets a dev container's manifest declare `tolerations` for GPU node taints (documented example is exactly `nvidia.com/gpu`), which combined with standard Kubernetes `resources.limits` (e.g. `nvidia.com/gpu: 1`) schedules the dev/preview/agent container onto a GPU node. Since Okteto runs on the customer's own Kubernetes cluster (Self-Hosted or BYOC), the GPU hardware itself is whatever the customer's cluster provides; Okteto's platform does not sell or list its own GPU SKUs/types.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://www.okteto.com/docs/admin/billing.md",
   "quote": "Okteto bills per seat on an annual contract. We do not charge per environment or per agent: a developer with one seat can run as many development environments and agents as your infrastructure supports.",
   "note": "granularity: account-only; cost: no; Okteto only bills for seats (unique user accounts), not for individual sandboxes/environments or their resource usage. The Okteto API provides programmatic access to resource management (namespaces, users, applications) but not usage or cost data. Okteto Insights provides operational metrics (CPU, memory, build/deploy times) but not billable usage or cost breakdowns. Compute billing is handled by the customer's own cloud provider (AWS/GCP) where the Kubernetes cluster runs.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": null,
 "locations_quote": "Okteto is installed and run entirely in your own infrastructure ... Okteto sells a per-seat platform licence that runs on the customer's own Kubernetes cluster. Okteto does not sell compute.",
 "locations_checked": "2026-10-01"
}