{
 "features_resolved": {
  "snapshot_any": false,
  "snapshot_mem": false,
  "fork": false,
  "pause_resume": false,
  "persistent_disk": true,
  "whole_disk": null,
  "persist_scope": null,
  "volumes": true,
  "auto_stop_idle": true,
  "long_sessions": true,
  "custom_image": true,
  "image_snapshot": false,
  "image_oci": true,
  "vm_isolation": false,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "browser_control": null,
  "desktop_control": null,
  "browser_and_desktop": false,
  "anti_bot": false,
  "captcha_solving": false,
  "residential_ip": false,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "open_internet": null,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu": false,
  "arm64": true,
  "windows": false,
  "macos": false,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "usage_api": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "harness_api": true,
  "own_agent_api": false,
  "fast_boot": null,
  "strong_isolation": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "secret_proxy": false,
  "secret_proxy_any": false,
  "volume_attach": true,
  "volume_shared": false,
  "sidecar": null,
  "fuse": null,
  "kernel_features": null,
  "burst": null
 },
 "company": {
  "id": "windmill",
  "checked": "2026-09-30",
  "company": "Windmill Labs, Inc.",
  "ownership": {
   "value": "independent",
   "parent": null,
   "source": "https://www.windmill.dev/docs/intro",
   "quote": "Made with passion in San Francisco and Paris. Windmill Labs is SOC 2 Type II compliant. © 2026 Windmill Labs, Inc. All rights reserved."
  },
  "stage": {
   "value": "seed",
   "source": "https://www.windmill.dev/",
   "quote": "Backed by [Y Combinator] [Gradient Ventures] [Bessemer Venture Partners]",
   "confidence": "medium",
   "note": "Company's own homepage lists Y Combinator, Gradient Ventures, and Bessemer Venture Partners as backers, implying at least a seed round with institutional VCs, but no press release, amount, or date for any priced round was found in the time available. Stage inferred as seed (not confirmed as a later stage) given company size (~7 people per YC page) and lack of any Series A/B announcement."
  },
  "accelerators": [
   {
    "name": "Y Combinator",
    "batch": "Summer 2022",
    "source": "https://www.ycombinator.com/companies/windmill",
    "quote": "\"batch\":\"S22\",\"batch_name\":\"Summer 2022\" ... \"website\":\"https://windmill.dev\" ... \"ycdc_status\":\"Active\"",
    "confidence": "high",
    "via": "research"
   }
  ],
  "total_funding_usd": {
   "value": null,
   "status": "unknown"
  },
  "last_round": {
   "type": "unknown",
   "amount_usd": null,
   "date": null,
   "leads": [],
   "status": "unknown",
   "source": "",
   "quote": ""
  },
  "investors": [
   "Y Combinator",
   "Gradient Ventures",
   "Bessemer Venture Partners",
   "Kima Ventures"
  ],
  "portfolio_listings": [
   {
    "source": "Kima Ventures",
    "company": "Windmill",
    "batch": null,
    "how": "domain"
   }
  ],
  "revenue": {
   "value": null,
   "status": "unknown"
  },
  "employees": {
   "value": 7,
   "source": "https://www.ycombinator.com/companies/windmill"
  },
  "note": "YC hint confirmed: the YC company page for 'Windmill' (slug windmill, S22/Summer 2022, status Active) lists website https://windmill.dev, which matches the card's domain (windmill.dev). Founder: Ruben Fiszel (per HN Launch post and YC page), based in Paris, France; founded 2022. Windmill's own homepage explicitly names Y Combinator, Gradient Ventures, and Bessemer Venture Partners as backers, but no specific round size, date, or lead investor could be confirmed from public sources in the time available -- funding stage and total raised are therefore best-effort inference (seed) rather than confirmed figures. Legal entity per site footer: Windmill Labs, Inc., Dover, DE, USA."
 },
 "id": "windmill",
 "name": "Windmill",
 "url": "https://www.windmill.dev/pricing",
 "category": "paas",
 "isolation": "container",
 "modes": [
  {
   "key": "cloud-team",
   "label": "Cloud Team execution credits",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  },
  {
   "key": "cloud-enterprise",
   "label": "Dedicated Cloud Enterprise",
   "flags": [
    "sales",
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  },
  {
   "key": "self-host",
   "label": "Self-hosted software",
   "flags": [
    "alt"
   ],
   "os": [
    "linux"
   ],
   "regions": null,
   "gpu_only": false,
   "features": {},
   "pricing": "resource",
   "vcpu_h": null,
   "ram_gib_h": null,
   "cpu_basis": "alloc",
   "ram_basis": "alloc",
   "active_floor": 0,
   "ram_per_vcpu": [
    null,
    null
   ],
   "ram_fixed_per_vcpu": null,
   "vcpu_options": null,
   "min_vcpu": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes": null,
   "pool_tiers": null,
   "requires_always_on": false,
   "always_on_month_per_instance": null,
   "commit_note": null,
   "min_billed_seconds": null,
   "granularity_s": null,
   "start_fee": null,
   "boot_overhead_s": null,
   "multiplier": 1,
   "windows_vcpu_h": null,
   "gpu": null,
   "note": ""
  }
 ],
 "storage": {
  "included_disk_gib": null,
  "disk_gib_month": null,
  "disk_billed_when_stopped": null,
  "snapshot_gib_month": null,
  "paused_ram_billed": null
 },
 "network": {
  "egress_free_gib": null,
  "egress_gib": null,
  "ipv4_month": null,
  "ipv4_available": null
 },
 "plans": [
  {
   "name": "Free",
   "fee": 0,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Cloud Free: 1,000 executions/month; no card. This is a hard native execution allowance, not USD credit."
  },
  {
   "name": "Team one developer",
   "fee": 10,
   "flags": [],
   "fee_is_credit": false,
   "included_usd": 0,
   "per_seat": 10,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "$10/month includes one developer (or two operators) and 10,000 normalized 1-second executions; max 10 seats; extra usage bills in arrears."
  },
  {
   "name": "Enterprise",
   "fee": 840,
   "flags": [
    "sales"
   ],
   "fee_is_credit": false,
   "included_usd": null,
   "per_seat": null,
   "concurrency": null,
   "max_session_h": null,
   "max_vcpu": null,
   "max_ram_gib": null,
   "sizes_allowed": null,
   "note": "Cloud core package $600/month; developers $40, operators $20; compute $100/CU-month. Minimum shown from $840; default 1 developer + 3 CU renders $940."
  }
 ],
 "free": {
  "monthly_credit": null,
  "one_time_credit": null
 },
 "features": {
  "linux": true,
  "windows": false,
  "macos": false,
  "arm64": true,
  "gpu": false,
  "snapshot": "none",
  "pause_resume": false,
  "fork": false,
  "persistent_disk": true,
  "volumes": null,
  "auto_stop_idle": true,
  "max_session_h": null,
  "custom_image": null,
  "docker_inside": false,
  "nested_virt": false,
  "root": null,
  "systemd": null,
  "browser": true,
  "desktop": false,
  "computer_use": false,
  "code_interpreter": null,
  "agent_harnesses": true,
  "ssh": false,
  "public_ipv4": false,
  "inbound_https": true,
  "custom_domain": null,
  "raw_tcp_inbound": null,
  "egress_allowlist": false,
  "static_egress_ip": false,
  "private_network": null,
  "self_host": true,
  "byoc": true,
  "open_source": true,
  "soc2": true,
  "hipaa": true,
  "sso": true,
  "gpu_types": [],
  "regions": null,
  "lang_python": true,
  "lang_node": true,
  "lang_go": null,
  "lang_rust": null,
  "lang_java": null,
  "gpu_desktop": null,
  "credential_injection": null,
  "egress_http_rules": false,
  "wake_on_request": false,
  "live_resize": false,
  "fork_running": false,
  "memory_snapshot_fork": false,
  "webhooks": null,
  "scheduled_wakeups": null,
  "audit_logs": true,
  "eu_data_residency": true,
  "zero_data_retention": null,
  "scoped_api_keys": null,
  "spend_limits": null,
  "mcp_server": true,
  "harness_api": true,
  "secret_proxy": false,
  "volume_attach": true,
  "volume_shared": false,
  "isolation": "container",
  "image_oci": true,
  "anti_bot": false,
  "captcha_solving": false,
  "snapshot_auto": false,
  "snapshot_on_demand": false,
  "own_agent_api": false,
  "ingress_rules": true,
  "guest_firewall": false,
  "max_session_unlimited": true,
  "egress_ip_type": "datacenter",
  "usage_api": false
 },
 "perf": {
  "cpu_runs_s": null,
  "cold_start_ms": null,
  "burst_tti_ms": null,
  "dax_s": null
 },
 "caveats": [
  "Cloud and self-hosted toggles have different economics; raw server HTML defaults self-hosted. Cloud rendered separately: Free 1000 executions/mo, Team $10/developer ($5/operator), 10k normalized 1-second executions/seat and max 10 seats.",
  "Cloud Enterprise core $600/mo, $40/developer/$20/operator, $100/CU-month. Default 2 workers+8 native subworkers+1 developer = $940; advertised minimum from $840. Self-hosted Enterprise $50/CU plus $20/developer is a software license, not hosted hardware.",
  "CU sizing depends workers/memory/native subworkers; 4-vCPU/8GB per session is not equivalent to four pooled workflow execution slots. Snapshot/network price not verified.",
  "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.",
  "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate."
 ],
 "sources": [
  "https://www.ycombinator.com/companies/windmill",
  "https://www.windmill.dev/pricing",
  "https://www.windmill.dev/docs/intro",
  "https://www.windmill.dev/",
  "https://www.windmill.dev/llms.txt"
 ],
 "audit_2026_09_29": {
  "applied": 4,
  "source": "checked against the provider's live pricing and docs pages",
  "reviewed": 3
 },
 "feature_evidence": {
  "harness_api": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/ai_sandbox.md",
   "quote": "Windmill includes a built-in template for Claude Code using the @anthropic-ai/claude-agent-sdk. It demonstrates the sandbox + volume pattern with session persistence.",
   "note": "First-party 'AI Sandbox' step/script type (flow editor 'AI Sandbox' step, script editor 'Claude Sandbox' template) runs Claude Code via the Claude Agent SDK inside nsjail with a volume holding the session id, so each run with a new prompt resumes the prior session; docs give skeletons for Codex and OpenCode/custom agents. Driven from outside via the normal jobs API / webhooks, with output streamed over SSE ('Stream flow progress step by step, script output and AI agent tokens over SSE from webhooks, HTTP routes and the jobs API'). It is a template on top of the generic job runner, not a dedicated harness API (no list-conversations endpoint), hence medium. Windmill's own AI agent flow steps also stream tokens and tool calls.",
   "checked": "2026-09-29"
  },
  "secret_proxy": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/ai_sandbox.md",
   "quote": "You must do the same for **any credential the agent needs at runtime**.",
   "note": "Secrets/resources are passed into the job as script inputs and, for agents, explicitly placed in environment variables (template does process.env.ANTHROPIC_API_KEY = anthropic.apiKey). Jobs also get an ephemeral WM_TOKEN env var. No credential-injecting proxy.",
   "checked": "2026-09-29"
  },
  "volume_attach": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/volumes.md",
   "quote": "Volumes provide persistent file storage that can be attached to scripts via code annotations.",
   "note": "Named volumes backed by workspace object storage (S3/Azure Blob/GCS), up to 10 per script, downloaded to the worker before the job and synced back after (not a live block device). Enterprise feature; Community Edition limited to 20 volumes/workspace and 50 MB per file. Read-only or read-write via sharing permissions.",
   "checked": "2026-09-29"
  },
  "volume_shared": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/volumes.md",
   "quote": "Only one job can use a given volume at a time. Windmill acquires an exclusive lease (60-second TTL, auto-renewed every 10 seconds) on each volume before downloading.",
   "note": "Exclusive lease per volume; concurrent jobs wait. Workspace object storage (S3) itself can be accessed concurrently by jobs through the SDK/API, but not as a shared mount.",
   "checked": "2026-09-29"
  },
  "isolation": {
   "value": "container",
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "NSJAIL is a process isolation tool from Google that provides: Filesystem isolation ... Network restrictions ... Resource limits ... User namespace",
   "note": "Windmill jobs run on shared Linux worker hosts, optionally confined by NSJAIL (Linux namespaces + seccomp, like gVisor's underlying primitives) or PID-namespace 'unshare'. No hypervisor/VM boundary; kernel is shared with the worker host. Both isolation layers are disabled by default.",
   "checked": "2026-09-30"
  },
  "image_oci": {
   "value": true,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Windmill can run any container image directly from a Bash script with the `# sandbox <image>` annotation. It is daemonless (no Docker socket, no Docker-in-Docker sidecar) and runs the image inside the job's own nsjail sandbox",
   "note": "crane pulls/extracts the OCI image's rootfs and nsjail runs the command with that rootfs as its /; supported on Windmill Cloud.",
   "checked": "2026-09-30"
  },
  "docker_inside": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "It is daemonless (no Docker socket, no Docker-in-Docker sidecar) and runs the image inside the job's own nsjail sandbox",
   "note": "OCI images can be run via the `# sandbox <image>` annotation, but there is no Docker daemon/socket or Docker-in-Docker inside jobs, so the `docker` CLI itself does not work inside a job.",
   "checked": "2026-09-30"
  },
  "nested_virt": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Windmill provides multiple layers of process isolation to protect your infrastructure from potentially malicious or buggy code execution.",
   "note": "not offered: outside the product's scope. Jobs run under nsjail/PID-namespace process isolation on shared workers; no /dev/kvm or nested virtualization is documented.",
   "checked": "2026-09-30"
  },
  "desktop": {
   "value": false,
   "source": "https://www.windmill.dev/pricing",
   "quote": "Windmill is an open-source and self-hostable workflow engine and developer platform to build, orchestrate, and monitor internal software at scale.",
   "note": "not offered: outside the product's scope (workflow/job execution platform, no graphical desktop/VNC/RDP).",
   "checked": "2026-09-30"
  },
  "browser": {
   "value": true,
   "source": "https://www.windmill.dev/docs/advanced/browser_automation",
   "quote": "By default, a worker group named `reports` is available which will handle jobs with the `chromium` tag. Workers assigned to this group will install chromium on start... The chromium binary will be available on these workers at `/usr/bin/chromium`.",
   "note": "A managed Chromium browser can be run headless on a dedicated worker group for scraping/testing scripts (sandbox required to disable Chromium's own sandbox flag).",
   "checked": "2026-09-30"
  },
  "computer_use": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/browser_automation",
   "quote": "Windmill makes it easy to perform browser automation tasks, such as testing or web scraping.",
   "note": "not offered: outside the product's scope. Browser automation is script/code driven (Playwright-style), no screenshot+click computer-use API.",
   "checked": "2026-09-30"
  },
  "anti_bot": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/browser_automation",
   "quote": "Windmill makes it easy to perform browser automation tasks, such as testing or web scraping.",
   "note": "not offered: outside the product's scope; no stealth/fingerprinting features documented.",
   "checked": "2026-09-30"
  },
  "captcha_solving": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/browser_automation",
   "quote": "Windmill makes it easy to perform browser automation tasks, such as testing or web scraping.",
   "note": "not offered: outside the product's scope; no built-in CAPTCHA solving documented.",
   "checked": "2026-09-30"
  },
  "ssh": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/ssh_execution",
   "quote": "Windmill can run a Bash script on a remote host that the worker can only reach over SSH... the worker reroutes execution to the remote host",
   "note": "not offered: outside the product's scope. This SSH feature is outbound (the worker SSHes to a separate target host to run a script); there is no inbound SSH access into the Windmill worker/job itself.",
   "checked": "2026-09-30"
  },
  "snapshot": {
   "value": "none",
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Windmill workers execute user-provided code in various languages.",
   "note": "Jobs are ephemeral script/flow executions on shared workers; there is no per-job VM/disk/memory machine snapshot concept (DuckLake 'snapshots' are data versioning, unrelated to machine state).",
   "checked": "2026-09-30"
  },
  "snapshot_auto": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Windmill workers execute user-provided code in various languages.",
   "note": "not offered: outside the product's scope; no machine to auto-checkpoint.",
   "checked": "2026-09-30"
  },
  "snapshot_on_demand": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Windmill workers execute user-provided code in various languages.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "fork": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/dev_workspaces",
   "quote": "Developers want sandboxes to test risky changes without affecting anyone else.",
   "note": "'Forks' in Windmill are git-branch-style workspace forks for code review, not clones of a running machine. No machine-cloning feature; not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "fork_running": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/dev_workspaces",
   "quote": "Developers want sandboxes to test risky changes without affecting anyone else.",
   "note": "not offered: outside the product's scope (no running-machine cloning).",
   "checked": "2026-09-30"
  },
  "memory_snapshot_fork": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/dev_workspaces",
   "quote": "Developers want sandboxes to test risky changes without affecting anyone else.",
   "note": "not offered: outside the product's scope.",
   "checked": "2026-09-30"
  },
  "pause_resume": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/autoscaling",
   "quote": "Autoscaling automatically adjusts the number of workers based on your workload demands.",
   "note": "not offered: outside the product's scope. Workers autoscale up/down but there is no per-session pause/resume of a customer machine.",
   "checked": "2026-09-30"
  },
  "wake_on_request": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/autoscaling",
   "quote": "Autoscaling automatically adjusts the number of workers based on your workload demands.",
   "note": "not offered: outside the product's scope. Autoscaling reacts to queue depth, not an individual sleeping sandbox waking on an inbound request.",
   "checked": "2026-09-30"
  },
  "persistent_disk": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/volumes",
   "quote": "Volumes provide persistent file storage that can be attached to scripts via code annotations.",
   "note": "Named volumes (object-storage-backed) persist files across separate job runs, functioning like persistent disk across a stateless worker fleet.",
   "checked": "2026-09-30"
  },
  "auto_stop_idle": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/autoscaling",
   "quote": "Configure autoscaling to scale up when queue depth increases and scale down when occupancy drops below 25%.",
   "note": "Enterprise autoscaling scales worker count down (toward the configured minimum) when idle; jobs themselves are ephemeral so there is no persistent 'idle machine' to stop in the sandbox sense.",
   "checked": "2026-09-30"
  },
  "live_resize": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/autoscaling",
   "quote": "Autoscaling automatically adjusts the number of workers based on your workload demands.",
   "note": "not offered: outside the product's scope; scaling changes worker count, not CPU/RAM of a running job/machine in place.",
   "checked": "2026-09-30"
  },
  "agent_harnesses": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/ai_sandbox",
   "quote": "Windmill includes a built-in template for Claude Code using the @anthropic-ai/claude-agent-sdk... docs give skeletons for Codex and OpenCode/custom agents.",
   "note": "Preinstalled/offered templates for Claude Code, Codex, and OpenCode running inside the nsjail 'AI sandbox' pattern.",
   "checked": "2026-09-30"
  },
  "own_agent_api": {
   "value": false,
   "source": "https://www.windmill.dev/pricing",
   "quote": "Windmill is an open-source and self-hostable workflow engine and developer platform to build, orchestrate, and monitor internal software at scale.",
   "note": "not offered: outside the product's scope. Windmill offers AI Agent flow steps and an MCP server to drive Windmill/coding harnesses, but has no first-party browser/computer-use/research task agent of its own.",
   "checked": "2026-09-30"
  },
  "mcp_server": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/mcp",
   "quote": "Windmill's MCP server allows AI tools to interact directly with a Windmill workspace. It supports: Accessing Windmill documentation; Executing scripts and flows; Creating, updating, listing, and deleting resources",
   "note": "First-party MCP server exposes Windmill's own sandboxed script/flow execution as MCP tools.",
   "checked": "2026-09-30"
  },
  "lang_python": {
   "value": true,
   "source": "https://www.windmill.dev/llms.txt",
   "quote": "Full flexibility of code with 20+ languages",
   "note": "Python is one of Windmill's core first-class script languages (Python quickstart docs).",
   "checked": "2026-09-30"
  },
  "lang_node": {
   "value": true,
   "source": "https://www.windmill.dev/llms.txt",
   "quote": "Full flexibility of code with 20+ languages",
   "note": "TypeScript/JavaScript run via Bun and Deno runtimes as core first-class script languages.",
   "checked": "2026-09-30"
  },
  "public_ipv4": {
   "value": false,
   "source": "https://www.windmill.dev/pricing",
   "quote": "Windmill is an open-source and self-hostable workflow engine and developer platform to build, orchestrate, and monitor internal software at scale.",
   "note": "not offered: outside the product's scope. Jobs run on shared multi-tenant worker infrastructure, not a per-customer machine with its own public IPv4.",
   "checked": "2026-09-30"
  },
  "inbound_https": {
   "value": true,
   "source": "https://www.windmill.dev/docs/core_concepts/4_webhooks",
   "quote": "HTTP routes ... to serve the stream on a custom path.",
   "note": "Scripts/flows can be exposed over HTTPS via webhooks and HTTP routes (custom paths) on the Windmill instance/cloud domain.",
   "checked": "2026-09-30"
  },
  "ingress_rules": {
   "value": true,
   "source": "https://www.windmill.dev/docs/triggers/http_routing",
   "quote": "When calling an HTTP trigger with Windmill Auth, the token must have `http_triggers:read` access to the trigger path.",
   "note": "HTTP routes support scoped-token auth and per-route allowed-origins configuration, giving provider-side control over who can call an exposed endpoint.",
   "checked": "2026-09-30"
  },
  "egress_allowlist": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Network restrictions - Optional network isolation",
   "note": "NSJAIL can optionally restrict network access per job, but no documented allow/deny list or no-internet mode; not a provider-managed egress allowlist product feature.",
   "checked": "2026-09-30"
  },
  "egress_http_rules": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Network restrictions - Optional network isolation",
   "note": "not offered: outside the product's scope; no HTTP method/path-level egress rules documented.",
   "checked": "2026-09-30"
  },
  "guest_firewall": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "NSJAIL is a process isolation tool from Google that provides ... User namespace - Jobs run as unprivileged users even when worker runs as root",
   "note": "not offered: outside the product's scope. Windmill is namespace/process isolation on a shared kernel (not a full VM/microVM), and jobs run unprivileged, so a guest-side nftables/iptables firewall is not the model.",
   "checked": "2026-09-30"
  },
  "static_egress_ip": {
   "value": false,
   "source": "https://www.windmill.dev/pricing",
   "quote": "Windmill is an open-source and self-hostable workflow engine and developer platform to build, orchestrate, and monitor internal software at scale.",
   "note": "not offered: outside the product's scope; no fixed outbound IP product documented for Windmill Cloud.",
   "checked": "2026-09-30"
  },
  "gpu": {
   "value": false,
   "source": "https://www.windmill.dev/docs/core_concepts/worker_groups",
   "quote": "This feature is useful if you want to run some scripts on a GPU machine, or if you want to run some scripts on high-memory machine.",
   "note": "GPU is only a worker-group tag you can point at your own self-hosted/BYO GPU hardware; Windmill Cloud does not sell managed GPU instances (no GPU pricing/plan).",
   "checked": "2026-09-30"
  },
  "windows": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Linux only - Not supported on Windows or macOS",
   "note": "not offered: outside the product's scope. Windmill workers (and their job isolation) run on Linux; Windows is not an offered execution OS.",
   "checked": "2026-09-30"
  },
  "macos": {
   "value": false,
   "source": "https://www.windmill.dev/docs/advanced/security_isolation",
   "quote": "Linux only - Not supported on Windows or macOS",
   "note": "not offered: outside the product's scope; no macOS execution environment.",
   "checked": "2026-09-30"
  },
  "arm64": {
   "value": true,
   "source": "https://www.windmill.dev/docs/misc/deploy_gcp",
   "quote": "Choose Linux as the operating system. We recommend using either default (x86_64) or ARM64 architecture.",
   "note": "Self-hosted deployment guides explicitly support ARM64 worker instances; Windmill Docker images are multi-arch.",
   "checked": "2026-09-30"
  },
  "soc2": {
   "value": true,
   "source": "https://www.windmill.dev/docs/misc/security_compliance",
   "quote": "Windmill is SOC 2 Type II compliant. You can download the SOC 2 report from the Customer Portal once your subscription is active.",
   "note": "SOC 2 Type II, covers the Enterprise Edition (Windmill Cloud).",
   "checked": "2026-09-30"
  },
  "hipaa": {
   "value": true,
   "source": "https://trust.windmill.dev",
   "quote": "Compliance overview: SOC 2 Type 2 Compliant, HIPAA Compliant",
   "note": "Trust center lists HIPAA compliance status as Compliant, alongside PHI-specific controls (PHI access/disclosure/amendment handling).",
   "checked": "2026-09-30"
  },
  "eu_data_residency": {
   "value": true,
   "source": "https://www.windmill.dev/docs/misc/self_host",
   "quote": "Windmill is an open-source and self-hostable workflow engine and developer platform.",
   "note": "Windmill Cloud's own region(s) are not documented, but the self-hosted mode (this card's 'self-host' plan) lets customers deploy the full stack in any region including the EU, satisfying EU data residency.",
   "checked": "2026-09-30"
  },
  "max_session_h": {
   "value": "none",
   "source": "https://www.windmill.dev/docs/core_concepts/jobs",
   "quote": "Default timeout for individual jobs, in seconds.",
   "note": "Job/session length is governed by a configurable timeout (job_default_timeout), self-set by the operator with no documented hard platform ceiling; treated as 'none' (operator-controlled).",
   "checked": "2026-09-30"
  },
  "egress_ip_type": {
   "value": "datacenter",
   "source": "https://www.windmill.dev/docs/misc/setup_github_app/index.mdx",
   "quote": "If your GitHub organization uses IP allow lists, you will need to whitelist the IP address of stats.windmill.dev ... Contact support@windmill.dev to get the current IP address.",
   "note": "Windmill Cloud jobs run on shared, provider-managed cloud worker infrastructure (Rust-based workers on standard cloud hosting); no residential/mobile egress applies. Docs mention only a single fixed IP for the Windmill-managed telemetry/GitHub-App endpoint (stats.windmill.dev), obtainable on request, not a per-customer static egress IP for job/script outbound traffic. No pricing/docs page advertises a dedicated static egress IP per workspace or job, so this is standard shared datacenter egress rather than confirmed static-datacenter.",
   "checked": "2026-09-30"
  },
  "usage_api": {
   "value": false,
   "source": "https://www.windmill.dev/pricing",
   "quote": "Cloud Team $10/developer ($5/operator), 10,000 normalized 1-second executions/seat. Enterprise core $600/mo, $40/developer/$20/operator, $100/CU-month. Billing tracked in account dashboard.",
   "note": "granularity: account-only; cost: yes; Windmill bills by 'normalized 1-second executions' counted per job run. The platform tracks job execution counts and cumulative usage in the account dashboard, but no public REST API endpoint or SDK method for querying billable usage per project/workspace/tag is documented. Dashboard/invoice only; jobs are ephemeral executions on shared workers, not persistent sandboxes with individual usage quotas.",
   "confidence": "medium",
   "checked": "2026-10-01"
  }
 },
 "locations": [],
 "locations_source": "https://www.windmill.dev/pricing",
 "locations_quote": "Windmill is an open-source and self-hostable workflow engine and developer platform to build, orchestrate, and monitor internal software at scale.",
 "locations_checked": "2026-10-01"
}