sudosudo
PUBLIC BETA

Autonomous monitoring + remediation in 5 minutes.

Register a target. Push metrics. When a rule fires, your AI agent SSHs in under your allowlist, investigates, and emails a triage report. No dashboards to babysit.

$ sudo start →View on GitHub
✓ One VM, no Kubernetes✓ Bring your own LLM key✓ Per-target SSH allowlist
vm-01cpu 78%cpu 91%cpu 64%
< 5 min
setup — zero Kubernetes
500
metric snapshots per target
1 call
to register + get a subdomain
$0
platform fee during beta
How it works

One process. One VM. Zero dashboards.

01
Register a target
One API call. You get a push token + a Caddy-managed subdomain like demo.sudosudo.dev. SSH creds and allowlist stored encrypted at rest.
02
Push metrics
A small push agent on your target POSTs JSON every N seconds. The last 500 snapshots are stored and chartable in the dashboard.
03
Agent triages CRIT
YAML rules fire on threshold breach. On CRIT, your agent (Claude, Kiro, DeepSeek…) SSHs in through the allowlist and emails a triage report.
Rules engine

YAML you already know. No DSL.

Expressions evaluate against pushed payload + recent history under a strict allowlist AST. No method calls, no surprises at 3 am.

✓payload.*, history[n].*, len/any/all/min/max/sum
✓Cooldown per rule — no alert storms
✓Severity: warn / crit / info
disk-high
mem-pressure
rules:
  - key: disk-high
    when: "payload.disk.used_pct >= 90"
    severity: crit
    cooldown_s: 900
    subject: "[{target}] disk {payload.disk.used_pct}% full"
    body: |
      Free: {payload.disk.avail_gb} GB
      Investigate db_retention.sh.

  - key: mem-pressure
    when: "payload.mem.used_pct >= 85"
    severity: warn
    cooldown_s: 300
Platform features

Everything you need. Nothing you don't.

Push ingest
Token-bucket rate limiting per target. Last 500 snapshots stored. Rule evaluation happens in-process — no queue for the happy path.
SSH allowlist
Every command goes through tgt-ssh. A dangerous blocklist + per-target allowlist ensures the agent can't stray.
Triage reports
Your agent SSHs in, runs allowlisted commands, and emails a markdown report. Audit JSONL logged per run.
Schedules
Recurring investigations (agent on a cron) or digests (metric + alert summary). Standalone scheduler for multi-worker deploys.
Channels
Fan-out to Slack or webhooks on alert events. Per-channel silence rules — mute by key or wildcard during deploys.
Multi-tenant
Orgs, users, memberships. Magic-link auth. Every storage call is org-scoped — one control plane, many teams.
Pricing

Free while in beta.

You bring your own LLM API key (Claude, DeepSeek, Kiro…) — cost stays with you, zero markup.

Most popular
Free
$0forever

1 target · 7-day history · community support

✓1 monitored target
✓500 metric snapshots
✓Unlimited alert rules
✓Email triage reports
✓SSH allowlist enforced
Get started →
Team
$19/ month

10 targets · 30-day history · email support

✓10 monitored targets
✓Full metric history
✓Slack + webhook channels
✓Multi-user orgs
✓Priority support
Coming soon
Self-hosted
$0OSS

Run on your own VM. Same code, same defaults.

✓Unlimited targets
✓Your own infra
✓Full source access
✓MIT license
✓Community support
View on GitHub
sudosudo

Your server. Your allowlist. Your agent.

Register your first target in under 5 minutes. No credit card required.

$ sudo start →Read the docs