The personal executive agent that actually lives in your messaging apps.
One single-tenant agent on your private AWS EC2 instance. Autonomous headless Chromium workers, KMS zero-knowledge vault autofill, Google Workspace sync, and instant authenticated user takeover via noVNC.
Engineered for production rigor and verified speed.
Everything your agent needs to actually take real action.
Unlike shallow chat wrappers that only generate text, Indie Instinct controls real browsers, safely executes web tasks, and operates inside your everyday messaging threads.
Connect your Telegram bot, WhatsApp Business number, and Linq line (delivering iMessage, RCS, and SMS). Memory, task history, and browser state remain synchronized in one centralized brain.
Browser automation runs inside isolated, non-root Chromium containers built from open-source kernel-images with squid egress firewalling.
When hitting CAPTCHAs, biometric MFA, or 3D Secure OTPs, the agent generates an expiring, private live stream. Complete challenges without ever leaking secrets to the LLM.
Securely store passwords, credit cards, addresses, and contacts. The browser broker decrypts via AWS KMS in local RAM and fills forms directly into the DOM, immediately freezing inspection to guarantee zero prompt injection leaks.
Direct OAuth connectors for Gmail, Google Calendar, and Contacts. Every morning, an autonomous scheduled job analyzes your schedule, detects meeting conflicts, summarizes urgent emails, and sends your daily brief.
Before sending emails, scheduling external meetings, or purchasing items, the agent pauses and requests your explicit approval via signed, single-use tokens.
How Indie Instinct works under the hood
From conversational prompt to hardened browser execution and verified receipts.
Command in Any App
Send a message via Telegram, WhatsApp, iMessage (Linq), or the Web Manager: 'Reserve the hotel in Seattle and draft an intro to Alex.'
Coordinator Plans & Dispatches
The root coordinator assesses intent, checks memory and vault handles, and spawns the isolated Chromium worker with strict execution bounds.
Zero-Knowledge Fill or Takeover
The browser broker injects encrypted passwords or payment cards directly into the DOM. If challenged with 2FA or CAPTCHA, it provides an instant live noVNC stream.
Durable Outbox & Confirmation
Once completed, results, receipts, and screenshot artifacts flow through the PostgreSQL durable outbox directly back into your chat thread.
The Single-VM architecture with zero middleman lock-in.
Complete independence. No multi-tenant cloud runtime dependencies (no Vercel, Neon, or Kernel Cloud runtime locks in production). Everything runs in your own AWS account on one hardened EC2 instance.
Amazon EC2 Dedicated Instance Topology
c7g.xlarge / t4g.xlarge • Docker Compose • Isolated Networks
Indie Instinct Single-VM vs. Multi-Tenant AI Agent SaaS
Why hosting your personal executive agent on a dedicated instance changes everything.
| Criteria | Indie Instinct (Self-Hosted V2) | Typical Multi-Tenant AI Agent |
|---|---|---|
| Data Sovereignty | 100% inside your private AWS VPC | Shared multi-tenant vendor database |
| Secret & Password Safety | AWS KMS envelope + DOM injection (0 prompt leaks) | Raw credentials passed in LLM system prompts |
| Human Takeover (MFA & CAPTCHA) | Live encrypted noVNC stream direct to browser | Task fails or relies on shady 3rd-party CAPTCHA farms |
| Pricing & Cost Predictability | Flat ~$30/mo AWS infra + exact Bedrock token cost | $150+/mo per seat with heavy markups & quotas |
| Multi-Channel Continuity | Unified state across Telegram, WhatsApp, Linq & Web | Siloed Web UI or Discord bot only |
Zero-knowledge secrets with hardened boundaries.
Designed for high-trust executive and enterprise workflows where leaking a credential or performing an unauthorized action is catastrophic.
Zero Prompt Injection Secret Leakage
Passwords, credit cards, and OTPs are never placed into model prompts or conversation context. Form injection happens in the browser broker process, which permanently seals inspection on that session.
Host IMDS Access Prohibited
Application containers cannot reach the AWS Instance Metadata Service (IMDS) or host backup roles. A dedicated, minimal credential agent assumes a restricted application role for Bedrock and S3 only.
AWS KMS Hardware Encryption
Credentials in the vault and image artifacts in S3 are protected with customer-managed AWS KMS keys. No unencrypted secrets touch disk or persistent database storage.
Durable Action Ledger
Every external tool call, browser interaction, approval grant, and outbound email is immutably logged to the PostgreSQL action ledger for auditability and compliance.
Strict Egress Firewalling
Headless Chromium containers route outbound web requests through a dedicated squid egress proxy with filtered domains, blocking malicious internal network pivoting.
GDPR Account Tombstoning
One-click complete workspace deletion erases sessions, vault items, Google tokens, and S3 artifacts, leaving an immutable deletion tombstone to prevent re-association.
Simple, Transparent Pricing
Choose a plan that fits your workflow and budget. No per-seat extortion, no surprise token overages—just predictable, autonomous executive assistance.
Starter Plan
Self-hosted open source
Free forever • Open source
Perfect for developers and homelab builders wanting complete code ownership and self-hosting on AWS.
- Full single-VM Docker Compose stack
- Telegram, WhatsApp & Linq lines
- Sandboxed Chromium worker & noVNC
- AWS KMS envelope-encrypted vault
- Daily Attention Brief for Gmail & Calendar
Dedicated Plan
Managed private instance
per month, billed monthly
Designed for busy executives and founders wanting a turnkey instance, automatic updates, and zero server management.
- Automated AWS CloudFormation & SSM updates
- Automated daily S3 backups & restore rehearsals
- 24/7 uptime monitoring & container health checks
- Priority WhatsApp & Linq provider onboarding
- Direct engineering Slack / Telegram channel
Enterprise Plan
Multi-instance sovereign fleets
Tailored SLA & dedicated VPC deployment
Ideal for family offices, PE firms, and executive teams requiring air-gapped instances and dedicated VPC endpoints.
- Multi-instance coordinator orchestration
- Custom AWS KMS key governance & BYOK
- Okta / Entra SAML & SCIM SSO integration
- Durable audit ledger export & SOC2 reports
- Dedicated technical account manager & SLA
⚡ True Zero Markup: AWS EC2 compute and Amazon Bedrock inference are paid directly to AWS (~$1/day). No middleman token tariffs.
Questions & clarifications
Everything you need to know about self-hosting, security boundaries, and supported channels.
Take back your time with an agent that actually executes for you.
Zero multi-tenant lock-in. 100% data sovereignty. Deploy in minutes on your private AWS cloud with headless browser execution and hardware-grade zero-knowledge vault protection.