You enter through the front door.
A protected HTTPS address recognizes the approved customer before traffic reaches the environment.
EMAIL-VERIFIED ACCESSPRIVATE AI INFRASTRUCTURE
Not another chatbot. A persistent AI operator in a protected environment—built around your work, connected to the tools you choose, and available whenever the next task arrives.
Protected route connected. Workspace isolated. Customer boundary active.
01 — THE DIFFERENCE
Most AI products give every customer a seat in the same application. KeepOak provisions a numbered environment with its own memory, storage, credentials, network boundary, and resource limits.
Your operator builds continuity over time. It knows the work you approved, remembers the context that matters, and stays ready to continue.
02 — YOUR PRIVATE SYSTEM
A protected HTTPS address recognizes the approved customer before traffic reaches the environment.
EMAIL-VERIFIED ACCESSHermes researches, drafts, organizes, monitors, and follows through inside your environment.
PERSISTENT MEMORYDownloads, files, and approved tools remain inside private storage with bounded compute.
HOST NETWORK DENIED03 — WORK THAT KEEPS MOVING
Start where your attention runs out. Your operator can take on recurring research, coordination, document work, and the follow-through that usually waits for tomorrow.
Track a market, investigate leads, compare options, and keep a living brief of what changed.
MONITOR · SYNTHESIZE · BRIEFPrepare documents, organize information, draft follow-ups, and move the next step into place.
ORGANIZE · DRAFT · DELIVERBuild a reliable first line for recurring questions, internal knowledge, and routine requests.
ANSWER · ROUTE · ESCALATEConnect the channels, accounts, and routines you already use—on the terms you choose.
CONNECT · AUTOMATE · ADAPT04 — PRIVATE BY ARCHITECTURE
Customers never join the operator Tailnet or touch Unraid, Docker, SSH, SMB, or another tenant. Cloudflare verifies identity at the edge, then carries approved traffic through an outbound-only tunnel to the right private environment.
Reserve a private environment →05 — FROM REQUEST TO READY
We assign a permanent customer number and provision the private environment.
Your approved email becomes the front door to your dedicated hostname.
You choose the AI provider, tools, and credentials your operator may use.
Your operator begins building context and workflows inside its private boundary.
PRODUCTION MODEL
One identity. One private runtime. One storage boundary.
06 — CLEAR BOUNDARIES
No. Each customer receives a separate numbered runtime, storage boundary, access policy, credentials, and memory.
No. You sign in through your protected web address. The private operator network stays operator-only.
Yes—inside your sandbox and within its compute and storage limits. The host and other tenants remain out of reach.
You do. Connect your preferred provider so usage, billing, and model access stay visible to you.
No. Runtime, storage, network, credentials, and memory are separated by customer.
07 — FIRST DEPLOYMENTS
KeepOak is opening a limited number of numbered customer environments. Join the launch list for early onboarding access.
No sales call. No customer VPN. No shared workspace.