For the first time, AI agents have complete, real control of a browser — not a limited API, not screen scraping. DOM, forms, sessions, cookies. Everything. Built in Rust. Secured by the compiler.
Real tasks. Real DOM. The agent navigates, reads, decides, types — and pauses only when something irreversible needs your approval.
Claude Code changed how developers work — because agents got real terminal access. Kitsune does this for the browser. Agents don't just see a webpage — they navigate, click, submit, authenticate, and act. Privacy is the architecture that makes full control safe to hand over.
Agents read live DOM, not screenshots. They understand page structure, state, dynamic elements, and SPA transitions — then modify or trigger any of it.
Agents operate inside real authenticated sessions. Log in once, delegate. Credentials never exposed in plaintext.
Agents open, manage, and coordinate across multiple tabs simultaneously — like a developer with 12 windows, but never confused.
Argon2+Age encrypted local vault. Agents fill forms without raw secrets ever appearing in memory or logs.
Money, accounts, emails — blocked until you explicitly approve. The gate shows exactly what will happen and cannot be dismissed by accident.
Every agent action is logged with undo semantics where possible. Like git for browser actions — see what happened, roll back what can be rolled back.
Describe what you want in plain English. The builder converts intent into a repeatable, shareable agent — no scripting, no selectors, no boilerplate.
Publish, install, and audit community agents — all OSS. Monitor prices, file taxes, track job postings. Inspect the code before you run it.
Each tab is an isolated process. A compromised agent on one tab cannot touch another. Enforced by Rust's ownership model at compile time.
Kitsune agents plug into your entire stack — OpenClaw, Claude, GPT-4o, local LLMs, Zapier, n8n, custom APIs — and the browser becomes the execution layer that ties everything together.
Your AI tools have always needed a web interface to act on. Now they have one without limits.
OpenClaw agents get a real browser runtime. Full web access — navigate, extract, act — no Playwright wrappers needed.
Drop Kitsune in as the computer-use layer for Claude agents. The model reasons; Kitsune executes — every DOM interaction handled natively.
Trigger Kitsune agents from any n8n or Zapier workflow. A webhook fires, an agent logs in and does the work.
Fully air-gapped operation. Point Kitsune at Ollama or LM Studio — reasoning and browser control both run on-device.
Expose Kitsune's browser capabilities as MCP tools. Any MCP-compatible agent gets full web access via standard protocol.
Control the full browser runtime from Python. Spin up agents, inspect DOM state, manage sessions from a script or notebook.
Use Kitsune as a LangChain tool or LangGraph node. Chain browser actions with memory, branching, and rollback built in.
Expose Kitsune via REST to any tool, any stack. If you can send an HTTP request, you can spin up an agent.
Every major browser is written in C++. That means use-after-free, buffer overflows, and data races are not edge cases — they're a category of bug that exists by default.
Kitsune is written entirely in Rust. The compiler eliminates that entire vulnerability class before a single line ships. No GC pauses. No null pointer panics. No race conditions. Guaranteed by the type system — not by policy, not by audit.
Use-after-free, buffer overflows, null pointer dereferences — Rust's borrow checker makes this entire bug class impossible to compile.
Concurrent agent execution with zero risk of data races. Rust's ownership model makes it impossible to share mutable state unsafely.
No garbage collector means no stop-the-world pauses. Agents run at predictable latency — critical when orchestrating multi-tab workflows.
Apache 2.0. Every line of the engine, vault, agent runtime, and HIL system is open source. The security guarantees are math, and the math is public.
First cohort shapes the product. Direct access to the team, early agent runtime builds, and lifetime OSS tier access — no subscription ever.
Full agent runtime, open source core, early API access. Build your own agents, publish to the marketplace, audit everything.
Install community agents, run your own, use the no-code builder. The browser you want when AI agents are your co-pilot.
Deploy Kitsune across your team with enterprise vault sync, custom agent signing, audit logs, and dedicated support.