AZMX AI · Use cases
What an AI agent that stays on your machine actually does.
Twelve concrete jobs developers, SREs, founders, and regulated teams already use AZMX for — pair-coding, incident triage, kubectl approvals, license-audit migrations, secret-clean dotfiles, and more. One agent, gated by per-call approval.
14-day Pro trial · no card · no account
Coding pair
Write the code. Approve every diff.
AZMX reads your repo, proposes the change, and waits at the approval gate. The agent never silently writes. The diff is yours to merge — or reject in one keystroke.
Refactor a service in one pass
Open the file, ask the agent to split the controller into a route + handler + service layer. Per-file approval on every write. Tests backfilled in the same session.
Read the workflow → CodingLand a tricky migration safely
Stage a multi-table migration. The agent proposes the SQL, tags the destructive parts (DROP, ALTER NOT NULL), and gates them behind Paranoid-mode confirmation.
Read the workflow → CodingTriaging a CI failure
@ the failing job log. The agent reads, locates the diff that broke it, and proposes the minimum fix to make the matrix green. Audit-log entry per file touched.
Read the workflow →Platform & SRE
Real ops. With a permission gate.
kubectl, terraform, aws, gcloud — every command that mutates infrastructure asks before it runs. The agent can investigate freely; it just can't act unilaterally.
kubectl rollout investigation
Pod is OOM-killing. The agent describes, fetches logs, checks the HPA, and proposes the resource bump as a labeled patch. You approve, kubectl applies, audit chain records.
Read the workflow → OpsTerraform plan as conversation
Run terraform plan in the panel. The agent explains what each resource change means, flags the destroys, and stages the apply behind explicit consent.
Read the workflow → OpsAWS incident with paged context
Page from CloudWatch. The agent assembles the timeline from CloudTrail + recent deploys, proposes the rollback, and lets your fingers run aws cli only when you say yes.
Read the workflow →Security & compliance
An agent your CISO can sign off on.
Every action lives in a hash-chained local audit log. Stream signed JSONL to your SIEM on Pro+. The agent cannot read .env, .ssh, credentials, or vault.yaml — defense-in-depth at the OS layer.
Dependency CVE triage
Paste the GitHub advisory. The agent identifies which call sites are reachable, which versions are affected, and drafts the upgrade PR — gated on your approval.
Read the workflow → SecuritySecret-leak prevention
DLP scan on every prompt (Teams+). High-confidence secret patterns block the call. Provider allowlist refuses outbound to anything you didn't fleet-pin.
Read the workflow → SecurityCompliance evidence collection
Audit log streams as signed JSONL into Splunk · Datadog · OpenTelemetry. SOC 2 evidence collection becomes a cron, not a quarterly fire drill.
Read the workflow →Founders & indie devs
Ship the MVP. Without the per-seat tax.
BYOK means you pay your AI provider directly. No per-message markup. No "AI subscription that's $0.40/dev/day before the seat fee." Annual Pro license is the cost of a coffee subscription.
From idea to deployable repo in a day
Spec in the panel. Agent scaffolds the routes, the model, the migration, the test runner. You approve. Repo is yours, not a hosted Codespace.
Read the workflow → FoundersCustomer-support hot patch on the road
Phone-tether, Ollama running locally, no cloud AI bill — the agent still works. The trust floor doesn't change between online and offline.
Read the workflow → FoundersInvestor-grade audit log on day one
Acquirers ask for an SBOM and audit trail. AZMX has both as a feature, not a bolt-on. Procurement reviews shrink from weeks to a Friday afternoon.
Read the workflow →We tried five AI coding tools before AZMX. It's the only one that passed our compliance review without a six-week vendor questionnaire. The honesty of the architecture is the feature.
VP of Engineering · Top-50 bank (under NDA)
Bring the agent to your machine.
Free for individuals, forever. Pro for power users at $20/mo. No account, no telemetry, no per-call markup — ever.
14-day Pro trial · no card · no account