AI-SRE · runs entirely in your AWS account

Your cloud. Your data. Your models. Our brain.

Krenox watches the infrastructure you already run, catches degradation before users feel it, and explains incidents with cited evidence. Experimental today: proposing the fix itself, as a pull request your team approves. Telemetry, code context, and AI inference never leave your cloud.

estate · production · aws us-east-1
illustrative incident
internet cdn edge cache alb-prod load balancer ingress nginx checkout-svc search-svc auth-svc pods services
INC-47 · checkout-svc confidence 0.87 · high
Root cause: connection-pool max lowered 64 → 16 in deploy 4f2c1a9
▲p99 latency 640ms → 2.1s at 14:02 UTC [metric: upstream_rq_time]
◆began 90s after deploy 4f2c1a9 [source: argocd events]
◆accept-queue backlog 2,431 conns [eBPF: tcp_v4_syn_recv]
what I can't see
No traces from payment-gateway (no OTLP endpoint). Adding one would confirm downstream impact.
pull request · #482 awaiting your review
fix(checkout): restore pool max, add jittered backoff
config/pool.yaml +1 −1 · checkout/backoff.go +18 −2
read-only collectors zero telemetry egress inference on your Bedrock fixes only via pull request
day one

Value on what you already run. No migration, no re-instrumentation.

01
Installed in an afternoon

Read-only collectors for Kubernetes and VMs, deployed with a Helm chart and a read-only IAM role. Your existing dashboards and pipelines keep working; Krenox sits beside them, not in front of them.

02
Kernel-level truth

eBPF observation reads syscalls, sockets, and latency at the kernel, so Krenox sees what's actually happening even when your applications don't log properly.

03
Before users feel it

Deterministic detection watches for degradation (latency drift, error-rate change, saturation) and raises it while it's still a curiosity, not a page at 3 a.m.

human in the loop

The AI acts only through pull requests

Krenox holds no credentials to your infrastructure. Fix proposals are experimental today: where Krenox is confident, it opens a pull request in your repository. Your team reviews it, your CI/CD ships it, or you close it and it learns why. Every action is reviewable, auditable, and reversible.

✓No write access to clusters, ever
✓Every PR links its full evidence bundle
✓Approvals belong to your team, not to us
your-org/payments · pull request open
fix(checkout): restore connection-pool max, add jittered backoff #482
krenox-bot wants to merge 2 commits into main from krenox/inc-47
−  maxConnections: 16
+  maxConnections: 64  # restored per INC-47 evidence
Review evidence bundle merge stays with your team
finding · INC-52 · search-svc confidence 0.61 · medium
Suspected slow leak in the indexer: heap growth ~3.2%/hour since v1.19, no matching traffic increase.
cites: rss trend [node_exporter] · gc pause p95 [runtime] ·
deploy diff v1.18→v1.19 [git] · request volume flat [eBPF]
what would raise confidence
Allocation profiling is off. Enabling continuous pprof on search-svc would let me confirm or reject this within a day.
honest by design

Every finding states its confidence, and its blind spots

Each conclusion carries the evidence it rests on, a stated confidence, and a list of what Krenox could not see. Claims without citations are rejected before a human ever reads them. When it doesn't know, it says so, and tells you exactly what would help it know.

"An AI that says 'I don't know, and here's what would help me know' beats one that's confidently wrong."
institutional memory

Krenox remembers

Every resolved incident, merged fix, and dismissed false alarm becomes institutional memory, in your account. The tenth similar incident is diagnosed with the first nine as evidence. Rejected theories aren't re-proposed. It knows who owned a service at the moment something broke, not just today.

INC-12 · nov 2025
Pool exhaustion, checkout
Resolved by PR #198. Signature stored.
INC-23 · jan 2026
Same signature, staging
Matched INC-12 in seconds. Resolved in 11 minutes.
INC-31 · mar 2026
False alarm, dismissed
Your team said no. Krenox won't propose that theory again.
INC-47 · today
Investigating now
Diagnosed with three prior incidents as evidence, including the theory you rejected.
This memory lives only in your cloud and belongs only to you: your incidents, findings, and history download from your dashboards whenever you want them. No cross-customer learning. Ever.
pricing

Monitor everything. Log everything. Ask anything. Your bill doesn't move.

A flat, published platform fee plus a per-node unit. No per-GB ingestion, no per-seat charges, no per-question metering. The price is on the website, and it's the price.

See published pricing →
Log ingestionincluded, unlimited
Custom metricsincluded, unlimited
AI investigations & questionsincluded, unlimited
Seats for your whole orgincluded, unlimited
the buying journey

How you'll evaluate Krenox

A trust ladder, not a sales funnel. Each step earns the next, and every step is reversible.

step 1 · day zerofree
See your estate first.

Before you install anything: user-journey probes on your public endpoints and a read-only assessment of your cloud account. You receive a real report (your estate map, risks, observability blind spots) having granted nothing but a read-only role.

step 2 · trial periodfree
A free trial period.

Krenox deploys into your account with success criteria agreed upfront: we replay your past incidents, shadow your on-call, and measure time-to-diagnosis against your baseline. By week three it knows your baselines; the rest of the trial it proves itself on your real traffic. It closes with an evidence report the product writes itself: what it caught, what it fixed, what it cost. You pay nothing.

step 3 · your call
Stay because it's working. Leave clean if not.

Convert to annual (the first five companies to do so get ~50% off their first year), or walk away: clean uninstall, your data downloaded from your dashboards, nothing retained. No lock-in is the point. Your data never left your cloud to begin with.

live demo & free trial
Break something in our sandbox, then validate Krenox with a free trial in your own AWS.
See the live demo →