{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": true,
  "pause_resume": false,
  "persistent_disk": false,
  "whole_disk": false,
  "persist_scope": null,
  "volumes": false,
  "auto_stop_idle": false,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": false,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "signadot",
  "checked": "2026-09-30",
  "company": "Signadot, Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.ycombinator.com/companies/signadot",
   "quote": "Signadot is a Kubernetes-native platform that empowers AI coding agents to verify code at scale."
  },
  "stage": {
   "value": "seed",
   "source": "https://techcrunch.com/2022/02/23/signadot-promises-developers-faster-feedback-loops/",
   "quote": "Signadot ... today announced that it has raised a $4 million seed funding round.",
   "confidence": "high",
   "note": "No later priced round found as of check date; $4M seed (Feb 2022) is the last known round."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Winter 2020",
    "source": "https://www.ycombinator.com/companies/signadot",
    "quote": "WINTER 2020 ACTIVE",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": 4000000,
   "status": "confirmed",
   "basis": "Only confirmed round found is the $4M seed reported by TechCrunch; no subsequent round disclosed.",
   "source": "https://techcrunch.com/2022/02/23/signadot-promises-developers-faster-feedback-loops/",
   "quote": "Signadot ... today announced that it has raised a $4 million seed funding round."
  },
  "last_round": {
   "type": "seed",
   "amount_usd": 4000000,
   "date": "2022-02",
   "leads": [
    "Redpoint Ventures"
   ],
   "status": "confirmed",
   "source": "https://techcrunch.com/2022/02/23/signadot-promises-developers-faster-feedback-loops/",
   "quote": "The round was led by Redpoint Ventures, with participation from Y Combinator ... as well as a group of angel investors that includes former Heroku CEO Adam Gross, former GitHub CTO Jason Warner, GitLab's Sébastien Pahl and LaunchDarkly co-founder and CEO, John Kodumal."
  },
  "investors": [
   "Redpoint Ventures",
   "Y Combinator",
   "Adam Gross (former Heroku CEO)",
   "Jason Warner (former GitHub CTO)",
   "Sébastien Pahl (GitLab)",
   "John Kodumal (LaunchDarkly co-founder/CEO)"
  ],
  "portfolio_listings": [
   {
    "source": "Redpoint Ventures",
    "company": "Signadot",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 8,
   "source": "https://www.ycombinator.com/companies/signadot"
  },
  "note": "YC W20 company confirmed to share the signadot.com domain (founders Arjun Iyer and Anirudh Ramanathan). Raised a $4M seed round in Feb 2022 led by Redpoint Ventures with YC and notable angels participating; no later priced round or revenue figures were found in public sources as of 2026-09-30."
 },
 "id": "signadot",
 "name": "Signadot",
 "url": "https://www.signadot.com/",
 "category": "dev-env",
 "isolation": "container",
 "modes": [
  {
   "key": "native",
   "label": "Native product; see regime notes",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": "Incomplete or non-resource economics: rates remain null, never interpreted as free."
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Starter",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Free forever: 50 sandbox creations/month, 100 test invocations/month, 10 concurrent devboxes, 1 Kubernetes cluster, 1 resource plugin. Hard cap: creations beyond quota are rejected until the 1st of next month (00:00 UTC); add-ons only on Business."
  },
  {
   "name": "Business",
   "fee": 250,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "$250/month includes 100 sandbox creations, 200 test invocations, 15 concurrent devboxes, 3 clusters, 5 resource plugins. Add-ons (pricing-page calculator): +50 sandboxes $300 ($6 per create), +100 test invocations $50 ($0.50 each), +5 concurrent devboxes $200 ($40 each). Self-serve spend capped at $2,050/month excluding the $250 SSO add-on; 10% off yearly; 30-day free trial."
  },
  {
   "name": "Enterprise",
   "fee": null,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": ""
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": true,
  "persistent_disk": false,
  "volumes": null,
  "auto_stop_idle": false,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": false,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": false,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": true,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": false,
  "byoc": true,
  "open_source": false,
  "soc2": true,
  "hipaa": false,
  "sso": true,
  "gpu_types": [],
  "regions": null,
  "lang_python": false,
  "lang_node": false,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": null,
  "eu_data_residency": false,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": false,
  "ingress_rules": true,
  "secret_proxy": false,
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "volume_attach": false,
  "volume_shared": false,
  "own_agent_api": false,
  "guest_firewall": false,
  "max_session_unlimited": true,
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Free 50 sandbox creates/100 tests/10 devboxes; Business $250/mo includes 100 creates/200 tests/15 concurrent devboxes. Add-ons sold in blocks; max Business $2050 excluding $250 SSO. BYO Kubernetes host costs separate. Devboxes count integrated workstations/CDEs, not purchased VMs.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.",
  "30-day free trial of the Business plan (Starter is free forever)."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/signadot",
  "https://www.signadot.com/",
  "https://www.signadot.com/pricing/",
  "https://www.signadot.com/docs/overview",
  "https://www.signadot.com/llms.txt"
 ],
 "fleet": {
  "default_max_instances": null,
  "default_max_vcpu": null,
  "default_max_gpus": null,
  "raise": null,
  "raise_time_days": null,
  "verification": "Public playground advertised without card; production runs in customer Kubernetes cluster.",
  "tiers": "Starter 10 concurrent connected devboxes; Business 15 plus blocks of 5; sandbox creates/month 50/100 separately.",
  "notes": "Connected devbox count includes local workstations/CDEs, not provider-provisioned VM count. Sandbox compute uses existing cluster capacity; account default machine pool therefore null. Do not interpret 50 monthly creates as 50 simultaneous machines.",
  "sources": [
   "https://www.signadot.com/pricing/",
   "https://www.signadot.com/"
  ],
  "researched": "2026-09-28"
 },
 "audit_2026_09_29": {
  "applied": 8,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 4
 },
 "feature_evidence": {
  "snapshot_auto": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/ttl.md",
   "quote": "when more than `ttl.duration` time has passed since the sandbox was created, the sandbox lifetime is considered to be expired and the sandbox is deleted.",
   "note": "A Signadot sandbox is a logical set of forked Kubernetes workloads in your own cluster routed by a routing key; lifecycle is apply/delete (+TTL deletion). No pause/sleep/snapshot concept anywhere in the sandbox spec, CLI reference or release notes.",
   "checked": "2026-09-29"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/cli/sandbox.md",
   "quote": "signadot sandbox delete my-sandbox",
   "note": "CLI sandbox commands are apply / get-env / get-files / list / get / delete only; no snapshot, checkpoint or fork-from-state API in CLI, REST spec index or release notes. Absence-based, hence medium.",
   "checked": "2026-09-29"
  },
  "harness_api": {
   "value": false,
   "source": "https://www.signadot.com/docs/integrations/coding-agents.md",
   "quote": "**[Signadot MCP server](https://www.signadot.com/docs/integrations/mcp.md)** exposes Signadot control-plane operations as MCP tools an agent can call directly from its chat surface.",
   "note": "Integration is the reverse direction: the coding agent (Claude Code, Cursor, Codex, Windsurf) runs elsewhere (laptop/CDE/background agent) and calls Signadot via MCP/CLI/agent skills. Signadot does not host or drive an agent harness.",
   "checked": "2026-09-29"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://www.signadot.com/docs/reference/sandboxes/preview-urls.md",
   "quote": "All preview endpoints are authenticated and require a Signadot API Key or cookie-based authentication to access.",
   "note": "You choose which in-cluster targets get preview endpoints; since Operator v1.4.0 previews can be turned off per cluster or served on your own domain (then auth is yours at your ingress).",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/smart-tests/secrets.md",
   "quote": "Smart tests can access secrets that are automatically injected into Smart Test Runner pods as environment variables.",
   "note": "Sandbox workloads get Kubernetes Secrets as env/files (spec env/local env secret refs). Control Plane Secrets (KMS-encrypted org store, 2026) are resolved to decrypted values and delivered to plan runners as params ('resolves each named secret to its decrypted value and delivers it to the runner'). No placeholder-substituting proxy.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "spec.forks[].forkOf: kind: Deployment ... customizations.images",
   "note": "Sandboxes are forked Kubernetes Deployments/workloads (pods, shared-kernel containers) running inside the customer's own cluster, isolated only via request routing keys, not per-customer VM/microVM isolation.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "forks: - forkOf: kind: Deployment ... customizations: images: - image: example.com/my-app:dev-abcdef",
   "note": "A forked workload can be overridden to run your own container image, but this launches a Kubernetes pod override rather than a standalone OCI-booted machine.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator ... sandboxes and tests run within your Kubernetes clusters",
   "note": "not offered: outside the product's scope — Signadot orchestrates routing/forks in the customer's own cluster, it does not give a machine to run Docker inside.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator and integrates with service meshes",
   "note": "not offered: outside the product's scope — no VM/KVM device is exposed by Signadot; it manages routing over existing cluster pods.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot is the platform for validating AI-generated code and microservices changes against real dependencies before merge.",
   "note": "not offered: outside the product's scope — a microservices testing/routing platform, not a machine with a graphical desktop.",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": false,
   "source": "https://www.signadot.com/product/jobs/",
   "quote": "Run existing Playwright, Cypress, k6, or custom test suites on pre-warmed runner pods inside your cluster",
   "note": "not offered: outside the product's scope — Jobs run headless test-suite runners you bring, not a managed interactive browser.",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot is a Kubernetes-native platform that gives developers and AI agents isolated environments and integrated testing and validation to build microservices with confidence.",
   "note": "not offered: outside the product's scope — no screenshot/click driving API; this is a testing/routing platform.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot is a Kubernetes-native platform that gives developers and AI agents isolated environments and integrated testing and validation to build microservices with confidence.",
   "note": "not offered: outside the product's scope — no browser/stealth product surface.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot is a Kubernetes-native platform that gives developers and AI agents isolated environments and integrated testing and validation to build microservices with confidence.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://www.signadot.com/docs/glossary.md",
   "quote": "A devbox is a Signadot entity to which `signadot local connect` sessions associate, normally associated with a developer's device or a Docker container.",
   "note": "A 'devbox' is the developer's own laptop/container tunnelled into the cluster via signadot local connect, not a Signadot-hosted machine reachable over SSH.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://www.signadot.com/docs/concepts/architecture.md",
   "quote": "Signadot Operator ... is responsible for all the in-cluster operations such as creating *forked workloads* associated with a sandbox, *in-cluster routing*, and managing resources associated with sandboxes.",
   "note": "No contradiction: Signadot's 'fork' is a logical fork of Kubernetes workload specs/routing (request-level isolation over a shared cluster), not a VM/memory/disk snapshot or clone. Confirmed by card's own feature_evidence: snapshot_auto=false (TTL-based delete only, no pause/sleep/restore) and snapshot_on_demand=false (CLI has apply/get/list/delete, no checkpoint/snapshot command). No fs or mem snapshot concept exists anywhere in docs, CLI reference, or API reference.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": true,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "forks: - forkOf: kind: Deployment namespace: example name: my-app customizations: images: - image: example.com/my-app:dev-abcdef",
   "note": "Forking a baseline workload into a modified copy is the core primitive of a Signadot Sandbox.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "forks: - forkOf: kind: Deployment ...",
   "note": "A 'fork' creates a new pod from a baseline workload's spec (optionally with an image/env override); it is not a live clone of a running instance's in-memory state.",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "forks: - forkOf: kind: Deployment ...",
   "note": "Forks are freshly-started pods from a workload definition; no memory/process state is carried over.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/ttl.md",
   "quote": "in the absence of a ttl value the sandbox will continue to exist until explicitly deleted",
   "note": "No pause/sleep/resume concept anywhere in the sandbox spec or CLI; lifecycle is only create/delete (+TTL delete).",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/ttl.md",
   "quote": "in the absence of a ttl value the sandbox will continue to exist until explicitly deleted",
   "note": "not offered: outside the product's scope — sandboxes are always routable once created, with no sleep/wake state to trigger on request.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "sandboxes and tests run within your Kubernetes clusters",
   "note": "not offered: outside the product's scope — Signadot has no notion of a per-sandbox disk it manages; any persistence is the customer's own cluster storage.",
   "checked": "2026-09-30"
  },
  "volume_attach": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "This document details all the fields and constraints associated with a valid sandbox specification.",
   "note": "not offered: outside the product's scope — the sandbox spec has no volume-attach field; storage is whatever the forked Kubernetes workload already defines.",
   "checked": "2026-09-30"
  },
  "volume_shared": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "This document details all the fields and constraints associated with a valid sandbox specification.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/ttl.md",
   "quote": "when more than `ttl.duration` time has passed since the sandbox was created, the sandbox lifetime is considered to be expired and the sandbox is deleted",
   "note": "TTL deletion is a fixed duration from creation/update time, not idle-activity detection.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/spec.md",
   "quote": "This document details all the fields and constraints associated with a valid sandbox specification.",
   "note": "not offered: outside the product's scope — no CPU/RAM resize field exists; Signadot does not size machines at all.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": false,
   "source": "https://www.signadot.com/docs/integrations/coding-agents.md",
   "quote": "Signadot MCP server exposes Signadot control-plane operations as MCP tools an agent can call directly from its chat surface.",
   "note": "Integration runs in the reverse direction: your own coding agent (Claude Code, Cursor, Codex, Windsurf) calls into Signadot via MCP/CLI; Signadot does not host or preinstall agent harnesses.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://www.signadot.com/product/smart-tests/",
   "quote": "AI-powered regression detection. Write API calls once in Starlark, and Signadot runs them against both the PR version and the stable version of a service ... using AI to flag real behavioral regressions",
   "note": "AI is used internally to flag regressions; there is no first-party API exposing a driveable browser/computer-use/research agent to end users.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": false,
   "source": "https://www.signadot.com/product/smart-tests/",
   "quote": "Write API calls once in Starlark",
   "note": "not offered: outside the product's scope — Signadot is not a code-execution sandbox; test authoring uses Starlark, not a general Python runtime.",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator and integrates with service meshes (Istio, Linkerd), CI/CD pipelines, and observability stacks.",
   "note": "not offered: outside the product's scope — no general-purpose Node.js execution runtime is provided by Signadot itself.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://www.signadot.com/docs/reference/sandboxes/preview-urls.md",
   "quote": "All preview endpoints are authenticated and require a Signadot API Key or cookie-based authentication to access.",
   "note": "not offered: outside the product's scope — access is via HTTPS preview URLs/ingress, not a raw public IPv4 per sandbox.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "sandboxes and tests run within your Kubernetes clusters using the Signadot operator",
   "note": "not offered: outside the product's scope — outbound network policy is whatever the customer's own cluster/cloud enforces; Signadot has no documented egress allowlist feature.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "sandboxes and tests run within your Kubernetes clusters using the Signadot operator",
   "note": "not offered: outside the product's scope — no HTTP method/path level egress control is documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator ... sandboxes and tests run within your Kubernetes clusters",
   "note": "not offered: outside the product's scope — there is no root-accessible dedicated VM/microVM guest for Signadot to expose a firewall inside; sandboxes are routed Kubernetes pods.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "sandboxes and tests run within your Kubernetes clusters using the Signadot operator",
   "note": "not offered: outside the product's scope — egress IP is whatever the customer's own cluster/cloud provider assigns.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://www.signadot.com/pricing/",
   "quote": "Flexible pricing based on active sandboxes and testing volume.",
   "note": "not offered: outside the product's scope — Signadot sells sandbox/test-invocation/devbox usage, not GPU compute.",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator and integrates with service meshes (Istio, Linkerd)",
   "note": "not offered: outside the product's scope — a Kubernetes-native tool targeting Linux container workloads only.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.signadot.com/docs/overview",
   "quote": "Signadot installs as a Kubernetes operator and integrates with service meshes (Istio, Linkerd)",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "open_source": {
   "value": false,
   "source": "https://github.com/signadot",
   "quote": "cli, go-sdk, plugins, charts, gateway-api, agent-skills — Apache License 2.0",
   "note": "The CLI, SDK, resource plugins, and Helm charts are Apache-2.0 on GitHub, but the core Signadot Operator/control-plane binary (the actual product) is closed-source and distributed as a proprietary image; the core product itself is not open source.",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": false,
   "source": "https://www.signadot.com/pricing/",
   "quote": "We follow the best practices around privacy and security. Signadot is SOC 2 Type 2 certified. All data at rest is encrypted and TLS used for network communication.",
   "note": "The security FAQ enumerates only SOC 2 Type 2; no HIPAA/BAA mention anywhere on the site.",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": false,
   "source": "https://www.signadot.com/pricing/",
   "quote": "The Signadot Dashboard and API are hosted in our cloud which runs in AWS.",
   "note": "Only a single hosted control-plane location (AWS, region unspecified) is documented; no EU-region control-plane option is offered. (Sandbox workloads themselves run in whatever region the customer's own cluster is in.)",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://www.signadot.com/docs/reference/sandboxes/ttl.md",
   "quote": "The field is optional, and in the absence of a ttl value the sandbox will continue to exist until explicitly deleted.",
   "note": "No imposed maximum; TTL is an optional, user-set duration and defaults to unlimited (deleted only on explicit request).",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://raw.githubusercontent.com/signadot/cli/main/scripts/install.sh",
   "quote": "arm64|aarch64) echo \"arm64\"",
   "note": "CLI install script detects and installs arm64 builds; independently confirmed the signadot/operator Docker Hub image is a multi-arch manifest list with both amd64 and arm64 image variants (docker hub API: architecture:\"arm64\", os:\"linux\"), so the Signadot Operator runs on arm64 Kubernetes clusters/nodes.",
   "checked": "2026-09-30"
  },
  "self_host": {
   "value": false,
   "source": "https://www.signadot.com/docs/concepts/architecture.md",
   "quote": "Signadot Control Plane hosted by Signadot. Shown below on the left, it provides the APIs and interfaces to create Sandboxes, and is used to serve Endpoint URLs that are used to access sandboxes.",
   "note": "The Control Plane (REST API, dashboard app.signadot.com, api.signadot.com, preview-URL hosting) is always run by Signadot; only the Operator (data-plane agent) installs into the customer's own Kubernetes cluster, which is what the card's byoc=true already captures. There is no self-managed/on-prem control-plane offering, so self_host=false is correct.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://www.signadot.com/pricing/",
   "quote": "You can track your usage in real-time through the dashboard. Our pricing is usage-based: you pay for Sandboxes created, Test Invocations, and Concurrent Local Connections.",
   "note": "granularity: account-only; cost: no; Signadot's REST API does not expose a usage endpoint. The OpenAPI specification lists endpoints for orgs, clusters, tokens, resource-plugins, routegroups, and sandboxes only. Usage tracking (sandboxes created, test invocations, concurrent devboxes) is available only through the dashboard UI, not programmatically via REST API, SDK, or CLI with machine-readable output.",
   "confidence": "high",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_everywhere": true,
 "locations_source": "https://www.signadot.com/docs/concepts/architecture.md",
 "locations_quote": "Signadot Operator installs into the customer's own Kubernetes cluster; sandboxes and tests run within your Kubernetes clusters. Sandbox workloads themselves run in whatever region the customer's own cluster is in.",
 "locations_checked": "2026-10-01"
}