{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": false,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "pipekit",
  "checked": "2026-09-30",
  "company": "Pipekit",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/pipekit",
   "quote": "Pipekit scales data & CI pipelines for enterprises. Founded in 2020 by Caelan Urquhart and J.P. Zivalich, Pipekit has 9 employees based in ."
  },
  "stage": {
   "value": "seed",
   "source": "https://www.ycombinator.com/companies/pipekit",
   "quote": "Founded in 2020 by Caelan Urquhart and J.P. Zivalich, Pipekit has 9 employees based in .",
   "confidence": "low",
   "note": "Pipekit is a YC S21 company (implies at least the standard YC pre-seed/seed check). No press release, Crunchbase profile, or company statement disclosing a priced round, amount, or investors could be found in the time budget (web search engines were largely unreachable/blocked in this environment). Stage is inferred from YC participation only and should be treated as low-confidence; total_funding, last_round, investors and revenue are left unknown rather than guessed."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Summer 2021",
    "source": "https://www.ycombinator.com/companies/pipekit",
    "quote": "Summer 2021",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [],
  "portfolio_listings": [],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 9,
   "source": "https://www.ycombinator.com/companies/pipekit"
  },
  "note": "Company: Pipekit, founded 2020 by Caelan Urquhart and J.P. Zivalich, backed by Y Combinator (S21/Summer 2021, batch status 'Active' per YC directory). Product: managed control plane for Argo Workflows (Kubernetes-native data/CI pipelines); BYO-cluster model, pricing from $799/cluster/month plus enterprise self-hosted tier. Domain https://pipekit.io matches the YC company page exactly, confirming this is the same entity as the pricing card. Could not confirm any specific funding round, amount, investor names, or revenue figures within the research time budget — standard web search engines (DuckDuckGo, Bing, Google, Crunchbase) were largely unreachable or returned captchas/irrelevant results from this environment. A buyer should treat funding/stage here as an inference from YC participation only, not a confirmed figure."
 },
 "id": "pipekit",
 "name": "Pipekit",
 "url": "https://pipekit.io/pricing",
 "category": "dev-env",
 "isolation": "container",
 "modes": [
  {
   "key": "native",
   "label": "Native product; see regime notes",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Incomplete or non-resource economics: rates remain null, never interpreted as free."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "BYO cluster starting price",
   "fee": 799,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Starting at $799 per cluster per month (scales linearly with the number of connected clusters). Control plane only: all compute runs on the customer's own Kubernetes cluster and is billed by their cloud. SSO & RBAC, workflow/compute metrics, log streaming & storage included."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": ""
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": null,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": false,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": false,
  "soc2": false,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": null,
  "lang_python": true,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": true,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": false,
  "secret_proxy": false,
  "volume_attach": false,
  "volume_shared": false,
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "own_agent_api": false,
  "guest_firewall": false,
  "max_session_unlimited": true,
  "isolation": "container",
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Chrome pricing: BYO cluster control plane starts $799/cluster/month; 30-day trial. Customer runs compute; Pipekit archives workflow logs, exposes UI/API and SSO/RBAC. Enterprise self-hosted/air-gapped control plane and support custom. $799 is NOT included compute hardware.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "Free trial: 30 days, no credit card; Pipekit can provision a Pipekit-hosted free-trial cluster (not a VM/sandbox): default limits 200m CPU / 200Mi memory / 100Mi ephemeral storage per container unless overridden, overall CPU/memory/storage caps that 'cannot be increased', no persistent storage, activeDeadlineSeconds 3600 default, no guarantees of availability. free.* stays null/0 (trial, not credit).",
  "Two deployment models: Pipekit Cloud (hosted control plane) and Self-Hosted (Helm, air-gap capable, requires a license key from sales; licenses expire). A separate 'Pipekit Support Service' (SLA-backed Argo maintainer support) is sold by meeting only; no price published."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/pipekit",
  "https://pipekit.io/pricing",
  "https://pipekit.io/"
 ],
 "audit_2026_09_29": {
  "applied": 5,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 1
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://docs.pipekit.io/concepts/cloud-vs-self-hosted.md",
   "quote": "they differ in where the control plane (UI, API, database) lives.",
   "note": "N/A by design: Pipekit is a managed control plane for Argo Workflows; compute runs as Argo pods on the customer's own Kubernetes cluster, so Pipekit has no machines to snapshot.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://docs.pipekit.io/concepts/cloud-vs-self-hosted.md",
   "quote": "Argo Workflows     | Runs in your cluster",
   "note": "No machine/sandbox snapshots; only workflow retry/resubmit/restart via CLI. Any snapshotting would be the customer's cluster/storage.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://docs.pipekit.io/ai/security-and-transports.md",
   "quote": null,
   "note": "Pipekit ships an MCP server (`pipekit mcp`) so external AI agents (Claude Code, Cursor, etc.) can drive Pipekit/Argo runs - the reverse direction; no API to run an agent harness inside a workload.",
   "checked": "2026-09-29"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Your workflows execute on your nodes, against your storage, using your service accounts and your secrets. Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "Egress control is whatever the customer's Kubernetes cluster provides (NetworkPolicy, cloud firewall); not a Pipekit feature.",
   "checked": "2026-09-29"
  },
  "egress_http_rules": {
   "value": false,
   "source": null,
   "quote": null,
   "note": "Not a Pipekit feature (BYO cluster).",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "Pipekit exposes no workload ports/preview URLs; ingress is the customer's cluster. Pipekit's own access control is SSO/RBAC over the control plane (default-deny namespaces), not network ingress to workloads.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://docs.pipekit.io/using-pipekit/pipes/edit/secrets.md",
   "quote": "You can store key value pairs in Pipekit and have them passed to your running workflow as environment variables.",
   "note": "Secrets are plaintext env vars inside the workflow container ('Key/value pairs are automatically mounted into your workflow as Environment variables'); no proxy.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": false,
   "source": "https://docs.pipekit.io/get-started/free-trial-cluster.md",
   "quote": "You cannot use persistent storage in the cluster.",
   "note": "Quote is for the Pipekit-hosted free-trial cluster. In production, PVCs/volumeClaimTemplates are standard Argo/Kubernetes on the customer's cluster and storage - not first-party Pipekit volumes.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://docs.pipekit.io/get-started/free-trial-cluster.md",
   "quote": "Minio does not have persistent storage. All artifacts are stored in memory and may be lost at any time.",
   "note": "No first-party shared volume; shared RWX storage would be the customer's cluster (e.g. NFS/EFS PVCs).",
   "checked": "2026-09-29"
  },
  "image_oci": {
   "value": true,
   "source": "https://docs.pipekit.io/reference/python-sdk.md",
   "quote": "@script(image=\"python:3.12\")",
   "note": "Argo Workflow steps (which Pipekit orchestrates) run arbitrary container/OCI images on the customer's cluster.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit is a control plane for Argo Workflows on the customer's Kubernetes cluster; there is no Pipekit-managed 'machine' to run Docker-in-Docker inside, and docs describe no such capability.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. No /dev/kvm or nested-VM capability is mentioned; compute is customer-cluster Argo pods, not a Pipekit VM/sandbox.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit is a workflow-orchestration control plane, not a desktop/VM product.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit orchestrates data/CI pipelines, not browser automation.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://docs.pipekit.io/reference/cli.md",
   "quote": "The Pipekit CLI lets you interact with Pipekit services without leaving your terminal... submit Workflows, list Runs, stop a Run, restart or retry one",
   "note": "not offered: outside the product's scope. Access is via CLI/API/UI against the Argo control plane; there is no Pipekit SSH into a machine (workflow pods live on the customer's own cluster).",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://docs.pipekit.io/concepts/cloud-vs-self-hosted.md",
   "quote": "Argo Workflows | Runs in your cluster",
   "note": "No machine/sandbox snapshots; Pipekit has no compute of its own to snapshot (per feature_evidence.snapshot_auto/snapshot_on_demand in the card).",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. No machine to clone; only workflow retry/resubmit exists.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://docs.pipekit.io/reference/cli.md",
   "quote": "submit Workflows, list Runs, stop a Run, restart or retry one",
   "note": "CLI/API exposes stop/restart/retry of a Workflow run, not pause/resume of a running machine with reduced billing; there is no Pipekit-billed machine to pause.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Workflows run on demand when submitted; there is no sleeping machine that wakes on an inbound request.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://docs.pipekit.io/get-started/free-trial-cluster.md",
   "quote": "You cannot use persistent storage in the cluster.",
   "note": "Quote is for the Pipekit-hosted free-trial cluster; in general Pipekit itself provides no persistent disk for a 'machine' - any storage/PVC is the customer's own Kubernetes cluster.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Argo Workflow pods run to completion for the job; there's no idle-machine concept to auto-stop.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. No Pipekit-managed machine whose CPU/RAM could be live-resized; resources are set per Workflow/pod spec on the customer's cluster.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://docs.pipekit.io/reference/cli.md",
   "quote": "The CLI also hosts the MCP Server that lets LLM clients (Claude Desktop, Cursor, Claude Code, Goose) call Pipekit on your behalf.",
   "note": "Direction is reversed: coding-agent harnesses can call INTO Pipekit via its MCP server; Pipekit does not preinstall/offer coding-agent harnesses inside a sandbox it runs.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit has no own browser/computer-use/research agent product.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://docs.pipekit.io/reference/python-sdk.md",
   "quote": "The Pipekit Python SDK lets you talk to the Pipekit API from Python... The SDK targets Python 3.10+.",
   "note": "First-party Python SDK for driving Pipekit/Argo Workflows.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://docs.pipekit.io/llms.txt",
   "quote": "Python SDK: Using the Pipekit Python SDK",
   "note": "Docs advertise a Python SDK; no Node.js/JavaScript SDK is documented.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "not offered: outside the product's scope. There is no Pipekit-provisioned machine that would get a public IPv4; networking belongs to the customer's cluster.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "Pipekit exposes no workload ports/preview URLs for running pipelines; access is via the Pipekit UI/API/CLI to the control plane, not HTTPS ingress to a workload machine.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Your workflows execute on your nodes, against your storage, using your service accounts and your secrets.",
   "note": "Not applicable: root/VM guest firewall control would require Pipekit to own the machine's kernel, but compute runs on the customer's own Kubernetes cluster/nodes.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit is a workflow control plane; any GPU nodes would be part of the customer's own cluster, not a Pipekit-offered GPU machine.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope. Pipekit targets Kubernetes/Argo Workflow (Linux container) pipelines; no Windows machine offering.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://pipekit.io/pricing",
   "quote": "Build, run, and scale data & CI pipelines on Kubernetes with Argo.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "We combine a linux/amd64 and a linux/arm64 variant of the containers as one image tag",
   "note": "Pipekit's own Agent/CLI containers ship linux/arm64 builds, and Argo Workflow pods can run on arm64 Kubernetes nodes.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://docs.pipekit.io/reference/cli.md",
   "quote": "submit Workflows, list Runs, stop a Run, restart or retry one",
   "note": "Pipekit imposes no session-length cap itself; a Workflow run's duration is governed by the customer's own Argo/Kubernetes cluster and workflow spec (e.g. activeDeadlineSeconds), except the Pipekit-hosted free-trial cluster which defaults activeDeadlineSeconds to 3600s (1h).",
   "checked": "2026-09-30"
  },
  "isolation": {
   "value": "container",
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Your workflows execute on your nodes, against your storage, using your service accounts and your secrets. Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "derived: Pipekit is a bring-your-own-cluster control plane for Argo Workflows; the actual compute is a Kubernetes pod (container, shared kernel) on the customer's own cluster. Pipekit itself provides no VM/microVM isolation layer.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Pipekit never has direct cluster credentials or inbound network access into your environment.",
   "note": "not offered: outside the product's scope. Pipekit is a control-plane-only product (BYO cluster); it has no compute/network of its own to assign a fixed egress IP to.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Pipekit is built so your workflow data, secrets, and compute stay in your infrastructure. The control plane brokers commands and metadata; the actual Workflow execution and your data never leave the cluster.",
   "note": "derived: because workflow execution and data never leave the customer's own Kubernetes cluster (and a fully self-hosted, air-gapped control plane is also offered), a customer can keep all machines/data within EU regions by choosing an EU-based cluster/deployment.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://docs.pipekit.io/self-hosting-pipekit/dependencies/container-images.md",
   "quote": "pipekitprivate | ui | Private | Yes | ... You will require a Docker Hub account with access to the `pipekitprivate` repository to pull the private images. This will be provided to you as part of your Pipekit subscription.",
   "note": "Pipekit's control-plane images (ui, id, messenger, users, pipekit-init) are closed-source and distributed only as private Docker Hub images gated behind a paid subscription; self-hosting requires contacting sales for a license key (docs.pipekit.io/self-hosting-pipekit.md: 'To self-host Pipekit, contact us'). Only the CLI and agent binaries are publicly pullable, but no source repo is published (no OSS license found on pipekit.io or github.com/pipekit). Confirms open_source: false.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Bring-your-own-cluster architecture, SBOMs, signed containers, optional air-gapped deployment.",
   "note": "Pipekit's dedicated Security docs page and full documentation set (checked via llms-full.txt) describe SBOMs, container signing, IdP-backed SSO/RBAC, and optional air-gapped self-hosting in detail, but never mention SOC 2 anywhere; there is no trust-center page (/trust, /security, /legal/security all 404). No public SOC 2 attestation found.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/security.md",
   "quote": "Bring-your-own-cluster architecture, SBOMs, signed containers, optional air-gapped deployment.",
   "note": "No mention of HIPAA/BAA anywhere in Pipekit's marketing site or docs (checked full docs export). Pipekit's BYO-cluster model means customer workflow data never reaches Pipekit's own infrastructure, but Pipekit does not publish a HIPAA-eligibility or BAA offering for its control plane.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://docs.pipekit.io/why-pipekit/observability.md",
   "quote": "Pipekit collects OpenTelemetry workflow metrics from each registered Cluster and surfaces them as dashboards. You see queue depth, scheduling latency, success and failure rates, and pod resource use per Pipe, without instrumenting your workflows. ... The control plane brokers commands and metadata; ",
   "note": "granularity: account-only; cost: no; Pipekit exposes operational metrics (performance, latency, resource utilization) but not billable usage. Pricing is fixed per cluster ($799/month) + customer's own cloud. No per-sandbox, per-workflow, or usage-based API exists.",
   "confidence": "high",
   "checked": "2026-01-16"
  }
 },
 "locations": [],
 "locations_source": "https://docs.pipekit.io/concepts/cloud-vs-self-hosted.md",
 "locations_quote": "Pipekit Cloud: Control plane hosted by Pipekit. Pipekit Agent runs in your cluster. Argo Workflows runs in your cluster.",
 "locations_checked": "2026-10-01"
}