Security
Your data is yours. Encrypted in memory and in transit.
When Miko Cloud opens, your agents run on your own isolated machine: encrypted memory, an encrypted disk and an end-to-end encrypted connection our gateway can't read.
Miko Cloud
What passes through Miko, and what stays sealed.
Every Miko Cloud machine, at 16, 32 or 64 GB, runs on 4th Gen AMD EPYC™ (Zen 4) or newer processors with AMD SEV‑SNP: its memory is encrypted by the processor, with a key that never leaves the chip. Miko Cloud only opens with it in place.
Your apps connect to your own machine over an end-to-end encrypted connection. Miko's gateway passes it along and can't read it. Inside the machine, memory and disk are encrypted, and the real CLIs and your sign-ins stay there.
Your apps
- Web app
- iPhone
End-to-end encrypted
Miko gateway
Passes your connection along.
Can't read it
Your machine
- Encrypted memoryAMD SEV-SNP
- Encrypted diskExport or delete it any time
- The real CLIsClaude Code, Codex and others
- Sign-ins and API keysStay inside this machine
Connects out. No open ports.
Sealed end to end
- Your code and files
- Your terminals and what your agents write
- Your sign-ins and API keys
Our gateway passes your connection along and can't read it.
What Miko's systems see
- Your Miko account: email address, plan and billing
- Whether your machine is on, and how much memory and disk it uses
- When and from where your apps connect, but not what they send
Your accounts never leave your machine
Sign in through each provider's own login, or add an API key. Miko never sees either – backups are encrypted inside your machine before they're stored.
End-to-end encrypted
Not even our gateway can read your terminals. Built on the Noise Protocol Framework, the same foundation as WireGuard.
Isolated by design
A separate virtual machine for every customer. No shared environments, no open ports.
Your code, your control
Encrypted disks. Export everything, or delete your machine and all its data in one click.
Miko never sells model usage: you bring your own Claude or ChatGPT account, or an API key. Compare plans
Starter and Cloud
Your keys stay with you, on every device.
How you sign in, pair a machine and add a phone, and how every update reaches it.
No passwords to steal
You sign in with a passkey: Face ID, Touch ID or your device's lock. Nothing to phish, nothing to leak.
Your keys stay on your devices
Your machine creates its own keys and keeps them on its encrypted disk. Your encryption keys live on your devices, not on our servers.
Pairing you can verify
When you connect a machine, your screen and your server show the same three words. Match them and you know it is your own machine.
Every new device needs your approval
A new phone or laptop only gets in after you approve it from a device you already trust, by matching a short code on both screens.
Lost your phone? Cut it off in seconds
Remove a device and it's disconnected from every machine within two seconds.
Private notifications
Notification contents are encrypted on your machine before they're sent, so Apple and Google only carry sealed messages.
Signed installs and updates
Every Miko release is signed and checked before anything is installed. Updates never interrupt a running agent, and roll back if anything looks wrong.
Run more agents without losing control.
Join the waitlist and we'll email you an invite.
Starter regular price $29 $14.50 first monthCloud from regular price $79 $39.50 first monthLaunch offer: first month at half price, then the regular price. Not on 64 GB.