Now in public beta

Private by Design.
Smarter by Default.

A privacy-first desktop terminal with a smart sidekick built in. Runs entirely on your machine. Your data stays local.

OneSidekick - session 1
~$ assist "check disk usage and find large files"
Analyzing your request...
Running: du -sh /* | sort -rh | head -20
Found 3 directories over 10GB. Showing breakdown:
  48G  /var/log  |  22G  /home/backups  |  14G  /tmp
Ready to clean up? Type next or ask a follow-up.
Security & Privacy

Security Built Into Every Layer

When you chat with AI, prompts are processed by AI providers. Everything else stays on your machine. For the data that does leave, multiple built-in safeguards protect your sensitive information before it ever reaches an external service.

Local-First Architecture

Conversations, commands, history, and settings are stored locally on your device. No cloud sync, no telemetry. Your workflow data never touches a remote server.

DataVeil PII Anonymization

Secure Mode uses 30+ pattern matching to efficiently detect and replace sensitive data like emails, IPs, API keys, and credentials with safe tokens before anything reaches AI.

Encrypted Local Storage

Your local database is encrypted at rest with military-grade 256-bit encryption. Even if someone gains direct access to your files, your data stays unreadable.

OS Keychain for Secrets

API keys and auth tokens are stored in your operating system's native secure vault. Never saved in plain text, never written to config files.

Safe Mode Command Blocking

Dangerous command patterns are automatically caught and blocked before they can run, including destructive deletions, disk formatting, and piped remote scripts.

Command Confirmation Gates

Risky commands from AI require your explicit approval before running, with clear danger-level indicators so you always know what you are about to execute.

Encrypted Backups

Exported backups are fully encrypted and password-protected with industry-standard key derivation. Your data stays safe even when it leaves the app.

Sandboxed Micro-Apps

Generated mini-applications run in isolated containers with restricted permissions. No file system or network access beyond what you explicitly allow.

Encrypted Automation Vault

Sensitive credentials used by automations are stored in a separate encrypted vault. The encryption key itself is secured inside your OS keychain.

Built For

Professionals Who Live in the Terminal

Whether you're a seasoned expert or still building your confidence, the assistant meets you where you are.

Security Professionals

Triage incidents, run scans, and investigate logs with guided context that keeps up with your workflow.

System Administrators

Manage infrastructure, troubleshoot services, and automate routine tasks without memorizing every flag and option.

Data Analysts

Transform, query, and pipeline data through the terminal with natural language guidance alongside your tools.

Students & Learners

Explore the command line with a patient assistant that explains what each command does and why as you go.

Ready to Work Smarter?

Download the beta and experience a terminal that runs locally, protects your data, and gets smarter with every session.