Govern and measure

Boundaries up front, receipts afterward

Hard budget caps at every level, credentials scoped below any developer, zero source code retention, and an audit trail for every action. Security your team can verify.

Install on GitHubDocumentation
agents/dep-updater.yamlenforced in real time
limits:  run: 1.00 # USD, hard cap per session  day: 4.00  week: 12.00  month: 40.00
dep-updater #291 · stopped at $1.00budget_hit

Budgets

No agent runs up a surprise bill

Every session runs under a hard cap, with trailing limits per account, per agent, and per developer. A blocked session never even creates a sandbox, and costs break down per turn, so chargeback is a query.
SOC 2audited controls
Type 1Certified
Type 2In progress
SecurityAvailabilityConfidentiality
Request the report: team@ellipsis.dev

Compliance

SOC 2 certified, audited controls

Ellipsis is SOC 2 Type 1 certified, with Type 2 in progress. Controls cover security, availability, and confidentiality. Request our report at team@ellipsis.dev.
What Ellipsis stores
Stored
  • Session logs and transcripts, with retention you set
  • A config snapshot per session
  • Cost and token counts per session
Never stored
  • Your source code
  • Repos are cloned into the sandbox
  • Deleted when the sandbox is torn down

Transparency

Every action, logged and visible

Zero source code retention: your code exists only inside a session's sandbox and is deleted when the sandbox is torn down. Every agent action is logged and auditable, so security is something your team can verify, not take on trust.
Sandbox credentialssession #1842
GH_TOKEN
scoped to splitshift-web, splitshift-api
ANTHROPIC_API_KEY
synthetic key, valid for this session only
ELLIPSIS_API_TOKEN
scoped to this session
All credentials revoked at teardown

Least privilege

Scoped credentials, revoked at teardown

Every session gets its own credentials: a GitHub token limited to the permissions and repos you allowed and an API token scoped to that session, all revoked when the sandbox is torn down. GitHub enforces the scopes at the token mint, so nothing in the sandbox can exceed them.
More on sandbox access →

Engineering analytics

Measure agents next to your humans

Every metric splits humans from bots, and agents rank on the same leaderboards as people.

See the analytics →

Explore the platform

Agents as code

Define in YAML, deploy with git push

Templates

Starter YAML templates for common tasks

Cloud sessions

You can close your laptop now

Sandboxes

An isolated computer for every session

Observability

Observe and monitor fleetwide

Analytics

Engineering metrics for the age of AI

API & CLI

Everything the dashboard does, scriptable