Kaba — AI that runs on your own devices

AI that runs on
your own devices.

Runs on the hardware you already own.
Keeps working when the internet is down.
Connects your devices to each other,
and to nothing else.

Free · open source · one binary
Kaba Labs — the harness and lab for intelligence you own
⤢ Fullscreen
Harness — browser, terminal, files, models Mesh — your devices, peer to peer Offline — works without the internet Self-hosting — your apps, kept running

Every connection is a way in. Attacks cost nothing now, and what leaks stays online forever. What are you getting for that risk? Use the internet when you choose. Keep everything working when it’s gone, or when the risk is too great.

Why now

What stays offline stays safe.

What goes online stays there forever, and with AI the risk is immediate: anything exposed can be found and used in minutes. Security used to depend on making attacks expensive, and that cost has dropped close to zero. People avoid conflict zones in the real world. Staying off the open internet is the same choice, and with Kaba you give up nothing to make it, at home or at work.

Attacks get cheaper every month
Models that write code also write exploits. Finding and using a vulnerability takes less skill and less time than it did a year ago.
Hosted services hold the data
A provider can investigate a breach and tell you what was taken. It can’t undo it, and it holds the same kind of data for millions of other people.
Assistants collect the most personal data
Memories, private questions and unfinished projects are what people share with assistants. A local model gives the same help without handing them over.
No public address
Kaba devices connect directly over iroh and verify each other by key. There is nothing to scan and no port to open on your router.
The moat is disappearing
Writing software is cheap and largely automated now. Open-source alternatives improve every month, and the reasons to rent the basics are going away.
Self-hosting stopped being a chore
Running your own apps used to mean updates, backups and late-night fixes. Kaba now handles that work around the clock.
Features

The features of the big AI labs, on your own hardware.

The tools people pay hosted services for, running on computers you already have.

Chat and assistants
Ask, write, summarize and plan with models running on your devices.
Coding agent
Reads your repo, runs code in a sandbox and fixes what it finds.
Memory
Remembers your projects and preferences, encrypted on your own disks.
Research and browsing
Searches the web and your saved pages, and shows what it read.
Voice
Talk to it and hear it answer, with speech handled on-device.
Image understanding
Reads photos, screenshots, scans and handwriting.
Files and documents
Works across documents, spreadsheets and PDFs where they already live.
Mesh across your devices
Laptops, phones, desktops and servers share models and files directly.
Offline mode
When the internet drops, everything local keeps working.
Self-hosted services
Run open-source apps like Jellyfin and Nextcloud on your hardware. Kaba keeps them updated and running, and reachable from any of your devices.
Ownership

AI lets you be your own provider, and your own marketplace.

The services people rent exist because building and running software used to be expensive. That cost is gone. You can provide those services for yourself, and trade what you make directly with other people.

Your own provider
Run what you used to rent.
Models, memory, files, media and office apps on hardware you own, kept running by Kaba. No account with a platform, no terms that change under you.
Your own marketplace
Sell what you build, directly.
The experts you train, the datasets you curate and the tools you design are assets. List, sell or lease them to other people over the mesh, with no platform in the middle.
How the marketplace works →
Harness

One place to run every model.

Browser, terminal, files, and models in a single harness on your devices. Kaba does the work itself, in the same windows you do. Policy checks every step before it runs.

Kaba harness
Memory

It remembers what matters to you.

Everything you see and do becomes private, encrypted memory, curated into clean datasets automatically.

Kaba memories
Lab

Then it gets better at it.

Train expert models on your own context, on your own GPUs or a peer’s. Every version is evaluated before it ships.

Kaba remote compute
Everyday

Intelligence off.
Everything else on.

Models and memory are one part of Kaba, and every bit of it can be switched off. What stays is the best way you have ever used the internet: private, peer to peer, and built with features the big browsers will never ship.

Kaba browser
A private browser
Your browsing stays on your device. No ad model, no telemetry, nothing sold.
Ghost Mode
Ghost Mode and Tor, per pane
Open any pane over Tor or in Ghost Mode, right beside your everyday tabs.
A mesh VPN, built in
Every device you own joins one encrypted private network by default. No accounts with a third party, no cloud broker, no open ports.
Route through your peers
Send traffic through any peer as an exit node: your home connection from a café, or an office server from the road.
A terminal multiplexer
Splits, tabs, and sessions that persist, with a real shell on any peer in the mesh. Detach on one device, pick up on another.
Your devices in your pocket
Reach every machine you own from your phone, wherever you are.
Make it yours
Configuration files in the spirit of vim and i3, with an SDK on the way.
Control

You say yes. Or nothing happens.

Anything sensitive waits for your approval. Approve it and Kaba learns from your choice. Deny it and nothing leaves your machine.

Happy Kaba hippo
Approved
Sent, in policy, on the record.
Your choice trains the next version of your expert.
Angry Kaba hippo
Denied
Nothing left the sandbox.
The network stayed closed and your data stayed home.

Every device you own, in one place

See what’s online, set what each person’s devices can do, approve anything sensitive, and check what it all costs to run. It works the same for one laptop or a small office.

INTERACTIVE PREVIEW · SAMPLE DATA
Kaba · Your devices
Your devices Home mesh
kaba://mesh/?view={{ fc.view }}
▲ 7 online ⚑ {{ fc.pendingCount }} pending GPU 34%
AR
Sunday, November 1 · 09:42

Your devices

{{ k.label }} {{ k.value }} {{ k.note }}
Needs attention Last 24 hours
{{ a.title }}
{{ a.meta }}
{{ a.time }}
Places
{{ s.name }}{{ s.online }}
{{ s.meta }}

Access

Which people and devices can join your mesh. Every device proves who it is with its own key before it can connect.

Directory (optional) ● Home server · synced 6 min ago
People and groups Account → Kaba group
{{ g.dn }} → {{ g.group }} {{ g.users }}
Devices without a verified key are refused. Nothing is published to the public internet.

Devices 10

Search devices…
HostnameGroupHardwarePolicyStatusSeen
{{ d.host }}{{ d.user }}
{{ d.group }} {{ d.hw }} {{ d.policy }} {{ d.status }} {{ d.seen }}

Policies

Toggle a cell to assign a policy to a group. Changes are staged until you push.

{{ fc.stagedCount }} staged
Policy
{{ g.name }}{{ g.count }}
{{ row.name }} {{ row.desc }}
{{ pd.k }}
{{ it.k }}{{ it.v }}
Showing rules for {{ fc.selectedPolicyName }}. Devices pick up changes the next time they reach the mesh, with or without the internet.

Activity 6

What Kaba is working on across your devices. Adults can see the kids’ sessions; everyone else’s stay with the person who started them.

{{ c }}
{{ fc.sess.user }} · {{ fc.sess.title }} {{ fc.sess.meta }}
{{ fc.sess.stateLabel }}
{{ t.who }}
{{ t.text }}

Approvals

Anything sensitive waits here until someone says yes.

{{ r.sev }}
{{ r.file }} {{ r.rule }} {{ r.user }} · {{ r.time }}
{{ r.status }}
{{ fc.rev.file }} {{ fc.rev.user }} · {{ fc.rev.device }} · {{ fc.rev.direction }}
{{ fc.rev.status }}
{{ h }}
{{ ln.n }}{{ ln.pre }}{{ ln.hit }}{{ ln.post }}
History
{{ lg.t }}{{ lg.e }}

Cost

{{ k.label }} {{ k.value }} {{ k.note }}
Tokens per day
On-devicePeer
{{ fc.rangeStart }}Today
Spend by device
{{ sg.name }}{{ sg.amt }}
ModelDevicesRequestsp50 latencyp95Tokens/s
{{ m.name }} {{ m.devices }} {{ m.req }} {{ m.p50 }} {{ m.p95 }} {{ m.tps }}
≡ KABA · {{ fc.viewUpper }} POLICY v{{ fc.policyVersion }} · OFFLINE-READY · P2P ONLY
Names, sites and figures are illustrative.
Cost

What hosted services really cost.

For a household that uses AI and streaming every day, the monthly bill is only part of it.

Hosted AI and cloud services, per month
AI assistant, power-user plans × 2$200
API tokens for coding agents$100–400
Video streaming, two services, ad-free 4K$45
Video platform without ads, family plan$23
Music streaming, family plan$20
Office suite, family plan$13
Cloud storage, 2 TB$10
VPN or remote access$10
$420–720 a month
$5,000–8,600 a year, rising with every price change.
Kaba, per month
$0
Free and open source on computers you already own. No caps, no reset windows, no ads. Pair it with open-source apps like Jellyfin and your media plays at the quality you stored it. The ongoing cost is electricity.
A GPU desktop that serves the whole house costs less than one year of the bill on the left.
What the bill doesn’t show
You pay for the subscription, and the provider earns again from what it learns about you: ads, recommendations and models built from your data.
Usage caps
Plans limit how much you can use, then make you wait for a reset or pay for the next tier.
Paying for mistakes
Token billing charges for every attempt, including wrong answers and the retries to fix them.
Your files are scanned
Cloud storage providers scan what you upload to enforce their policies, and many analyze your photos to sort faces, places and objects.
Your taste is the product
Music and video services record what you play, skip and replay, then use it to target ads and decide what gets recommended and made.
Your home is listening
Smart speakers, cameras and home hubs record what your family says and how your household lives, and providers use it to improve their own services.
Your conversations train their models
Many consumer AI plans use your chats to train future models unless you find the setting and opt out.
Quality set by their costs
Streams drop resolution to save bandwidth and stop to ask if you’re still watching.
Ads and price rises
Cheaper tiers carry ads, and prices go up on the provider’s schedule, not yours.
Typical U.S. list prices, November 2026. Token spend varies with use.

How Kaba compares

Hosted assistants, local model runners and cloud office suites, compared on the features people use every day and on where that work happens.

Feature
Kaba
On your hardware
{{ c.name }}
{{ c.kind }}
{{ r.label }}
{{ v.note }}
{{ v.note }}
Compare Kaba with
Kaba
{{ cmpHOther }}
{{ r.label }}
{{ r.k.text }}
{{ r.o.text }}
Built in Partial or via add-ons Not offered or not documented Based on each product's public documentation, November 2026. Product names are trademarks of their owners.
Build your stack
Start with one laptop and add devices as you go.
Hardware tiers, a setup path, the services each piece replaces, and what happens when the internet goes down.
Build your stack →

Your hardware.
Your AI.

$ curl -fsSL https://kaba.ai/install.sh | sh

A team from GE CIRT and Mandiant R&D, led by the founder of Threat Stack (acquired by F5) and Critical Stack (acquired by Capital One), and co-founder of Kolide (acquired by 1Password).
Features

Be your own lab.

Your laptop, desktop, and home lab become one private intelligence that learns from how you work. Build datasets from your own context, train LoRA experts on your own hardware, and own every one of them. Local and encrypted by default.

your/research-notes.lora· owned by you your/code-review.lora· owned by you your/writing-voice.lora· owned by you
On this page {{ t.label }}

The client is the lab

The client docs ↗

Using models is now the norm. With Kaba, build datasets, train with RL, and turn telemetry into fuel. Be your own lab.

Full stack, end-to-end context — the reason the models get good.
No other tool, app, or model has your full context — just the prompts, or just the data within that app. Kaba's client encapsulates your flow across the entire stack, observing the ground truth of how, when, and why you work. Every observation stays local, encrypted at rest.
LoRA yours browser terminal files harness
Navigation
Navigation
Every peer, model, memory, and run in one workspace. Jump back into frames where you left off.
Model harness
Model harness and lab
Chat, tool loops, and adapters over any local model. Every exchange becomes trajectory data that sharpens the next LoRA.
{{ tile.title }}
{{ tile.placeholder }}
{{ tile.tag }}
{{ tile.title }}
{{ tile.desc }}

How Kaba works

Protocols docs ↗
// THE MESH — peers, streams, tokens
laptop laptop.kaba gpu-tower gpu-tower.kaba k8s-node homelab.kaba phone phone.kaba tor egress kaba/infer/v1 kaba/train/v1 kaba/fs/v1 kaba/sync/v1 kaba/pty/v1
Every stream is an encrypted QUIC connection between peers you own — addressed by key-derived .kaba names over iroh, no DNS, no CA. Prompt goes out on kaba/infer/v1, tokens stream back. Anything that leaves the mesh can exit over Tor — and adapter selection is the peer's policy, the requester never chooses.
kabactl — zsh
$ kabactl cluster join --ticket kaba-intro
✓ gpu-tower joined · kaba/cluster/v1
$ kabactl infer --peer gpu-tower
▸ streaming tokens · kaba/infer/v1
$ kabactl train lora --dataset memories/
▸ checkpoint 3/12 · trajectory logged
▸ policy: local-only · encrypted at rest
// THE LEARNING LOOP — observe → memory → RL → adapter
observe attention memory memcrypt RL trajectory LoRA adapter yours, versioned
Memories are written autonomously from observed context, encrypted before rest. RL runs over memories and trajectories; the output is a LoRA adapter that is yours — sell, buy, trade, breed.
toolloop
// THE TOOL LOOP
01 prompt → plan 02 tool call → gVisor container 03 observe → checkpoint 04 parallel tasks → peer GPUs 05 hooks gate every edit

Marketplace — an open market for experts

Marketplace docs ↗
Every adapter you train is an expert. Experts are assets.
The LoRAs you build, the datasets you curate, the tools you design — list them, price them, sell or lease them. And because experts are composable, buyers don't just run yours: they breed it with their own — merging adapters into offspring with genuinely new capability.
rust-dev .lora · yours sec-audit .lora · leased offspring safe-rust.lora bred, versioned, yours to list
Experts for sale or lease
List a LoRA with its manifest and eval trail. Sell it outright or lease it by the epoch. Buyers verify provenance before a single token streams.
Datasets, policy-scrubbed
Curated training sets are built from your work and released only through the policy gate. What you sell is exactly what you chose to share.
Tools for the loop
Ship the tools you design for your experts — sandboxed, gVisor-contained, ready to drop into anyone's tool loop.
Breed for new capability
Combine experts — yours with bought, bought with leased. Merged adapters inherit from both lines; the offspring is a new asset you can list.

Mobile — your cluster in your pocket

Mobile docs ↗
All the benefits of the client in an on-the-go package. Never walk around with your laptop open again.
chatFull bi-directional conversations with any model on the cluster — pick a peer, pick an expert, talk.
remoteA remote for every peer in the mesh — see what's running, start and stop jobs from anywhere.
manageDevices and policies in your pocket — approve peers, edit rules, watch the mesh react live.

kabactl — the whole mesh from one prompt

Kabactl docs ↗
kabactl
Everything the client does, scriptable.
Join clusters, stream inference, push training jobs, inspect memories, edit policies — from any shell, over the same encrypted streams. Pipe it, cron it, put it in CI.
$ kabactl --help
cluster   join, leave, status, ticket
infer     stream tokens from any peer
train     lora build · push · import
mem       ls, show, forget — your memories
policy    edit the rules the mesh enforces
fs        browse and stream peer files
$
Composable
Reads stdin, writes JSON. Every command pipes into the next. Your mesh speaks Unix.
Peer-addressed
Target any device you own by name. LAN, tailnet, or across the world — the stream finds it and connects you directly.
Same rules apply
The CLI goes through the identical policy gate as the client. No backdoor, no service account, no exceptions.

How Kaba compares

Open-source harnesses and local AI tools, compared on what Kaba adds: memory from your own activity, training on it, policy on every step, and a private mesh across your devices.

Feature
Kaba
Harness and lab
{{ c.name }}
{{ c.kind }}
{{ r.label }}
{{ v.note }}
{{ v.note }}
Compare Kaba with
Kaba
{{ cmpPOther }}
{{ r.label }}
{{ r.k.text }}
{{ r.o.text }}
Built in Partial or via add-ons Not offered or not documented Based on each project's public documentation, October 2026. Product names are trademarks of their owners.
{{ qa.q }}
{{ qa.a }}

Your hardware. Your model.
Start training your attention.

KABA
Install in one line.
$ curl -fsSL https://kaba.ai/install.sh | sh
Download for {{ osLabel }} free · open source
Build your stack

Start with what you have.

Kaba turns the laptops, desktops, phones and spare machines you already own into one private system. It keeps working when the internet, a provider or the power goes down.

On this page {{ t.label }}
01

Hardware tiers

Every tier runs the same software. Adding a machine adds capacity; nothing has to be replaced.

One laptop
Personal setup
You need
Any recent laptop with 16 GB of memory. A GPU helps but isn’t required.
You get
·Chat, writing, research and a coding agent on small models
·Encrypted memory of your own work
·Works fully offline
Household
Shared across a home
You need
Add a desktop with a GPU and a storage box or spare PC. Phones and tablets join as they are.
You get
·Larger models served from the GPU to every device in the house
·Open-source apps like Jellyfin, Immich and Home Assistant for media, photos and the smart home, maintained by Kaba
·Kids’ devices with approvals for installs and exports
·Phones reach home from anywhere over direct connections
Small office
Shared across a team
You need
One or two GPU machines, a storage server, and everyone’s laptops. Branch sites join over the mesh.
You get
·Shared models with policies for each team
·Open-source office and file servers, kept patched and reachable only over your mesh
·Approvals for anything sensitive, with a full history
·Every device, person and cost in one view
02

Setup path

Install and pair your devices first. Moving services can happen gradually, alongside the tools you use today.

1
Install Kaba on one device
One binary for macOS, Windows or Linux. No account to create.
2
Add your other devices
Scan a code on each one. Devices exchange keys directly; there’s no cloud sign-in.
3
Choose your models
Download once and share across the mesh, or load them from a USB drive.
4
Self-host the rest
Pick open-source replacements like Jellyfin, Immich, Nextcloud and LibreOffice. Kaba installs them, keeps them updated and makes them reachable from all your devices.
5
Set policies and test offline
Decide what each person can do, then disconnect from the internet and confirm everything still works.
03

What each piece replaces

Kaba covers AI and the connections between your devices. For media, photos, files and documents, mature open-source apps already exist, and open-source rebuilds of paid desktop software are close behind. Run them on your own hardware and Kaba keeps them running and reachable from anywhere, without exposing them to the internet.

Kaba Projects
Instead of ChatGPT, Claude, Gemini, Copilot and hosted coding tools
Kaba research
Instead of Hosted search and research assistants
Kaba mesh
Instead of Cloud VPNs, port forwarding and remote-desktop services
JellyfinOpen source
Instead of Video and music streaming, for the movies, shows and music you own
ImmichOpen source
Instead of Google Photos and iCloud Photos
NextcloudOpen source
Instead of Google Drive, Dropbox and OneDrive
Home AssistantOpen source
Instead of Google Home, Apple Home and Amazon Alexa. Your lights, cameras, locks and voice commands stay inside your house.
LibreOfficeOpen source
Instead of Microsoft 365 and Google Docs, available today
BlenderOpen source
Instead of Cinema 4D and other paid 3D tools
Paid desktop software is next
With code this cheap to write, one-for-one open-source rebuilds of paid apps are arriving fast. The Craft Apps from the ArtCraft team are native, run on your own files and replace the tools people pay for every month. The same will happen to every paid app.
Part of KabaOpen-source app Kaba runs and maintainsProduct names are trademarks of their owners.
Kaba maintains them for you
Self-hosting used to mean updates, backups and fixing things at midnight. Kaba does that work 24/7, so your own apps stay up the way the big cloud services do.
Installs and configures
Pick an app and Kaba sets it up on the right machine, with storage and access already wired to your mesh.
Updates and patches
Security fixes and new versions are tested and applied as they ship, with a rollback if anything breaks.
Backs up and restores
Data is backed up to another device you own and checked so a restore actually works.
Watches around the clock
Kaba monitors every app, repairs what fails and tells you what it changed.
04

A mesh of your own devices

Devices find each other and connect directly over iroh, an encrypted peer-to-peer protocol. Every connection is verified by device key, so only your devices can join. Nothing is published to the public internet and no ports are opened on your router.

Home network gpu-towerGPU · serves modelsnas-basementJellyfin, Immich, filesana-thinkpadLaptopkids-ipadTabletoffice-miniOfficepixel-anaOn the roadpi-cabinCabin, on solar
Home devices, to each other
Local network. Works with the internet down.
Home ↔ office
Direct and encrypted, verified by device key.
Home ↔ phone on the road
Direct and encrypted from any network.
Home ↔ cabin
Through an encrypted relay when no direct path exists. The relay can’t read the traffic.
Local network, works offlineDirect encrypted connectionEncrypted relay you can run yourself
05

When things go wrong

If
The internet goes down
Then
Models, memory, chat and the self-hosted apps on your network keep working on every device at home.
If
A provider changes its terms or shuts down
Then
Nothing changes for you. The models, data and services are already on your hardware.
If
You’re away from home
Then
Your phone connects straight to home. With no signal at all, it works with what’s stored on it and syncs later.
If
The power goes out
Then
A laptop on battery runs a small model on its own. A solar-powered machine can keep a site running.
If
A device is lost or stolen
Then
Revoke its key from any other device. Its data is encrypted at rest and it can no longer join the mesh.
If
A web page contains hidden instructions
Then
Sensitive actions wait for approval, so injected instructions can’t send your files anywhere.
{{ qa.q }}
{{ qa.a }}

Install Kaba on your first device.

$ curl -fsSL https://kaba.ai/install.sh | sh
Download for {{ osLabel }}Free · open source · one binary

A team from GE CIRT and Mandiant R&D, led by the founder of Threat Stack (acquired by F5) and Critical Stack (acquired by Capital One), and co-founder of Kolide (acquired by 1Password).
About Kaba Labs

Security people who don't want to slow you down.

We've spent decades in enterprise security. We've also watched security teams become the reason new technology stalls.

We don't think that trade-off is necessary. You can move fast, understand your risk, and protect your data at the same time. Kaba is how we're proving it.

Our team has worked incident response at GE CIRT and done R&D at Mandiant. Our founder started Threat Stack, an early cloud and Linux security company built on deep syscall monitoring and acquired by F5, and Critical Stack, a secure Kubernetes platform acquired by Capital One, and co-founded Kolide, the endpoint monitoring company built with the team behind osquery and acquired by 1Password. Kaba is the latest of those, and not the last.

Based in
Boston, MA
Background
GE CIRT · Mandiant R&D · founder of Threat Stack (acquired by F5) and Critical Stack (acquired by Capital One), co-founder of Kolide (acquired by 1Password)
Building
The harness and lab for intelligence you own
Accessibility is a Human right. Your data. Your model. Your experience. Real-time and continuously verified.
© Kaba Labs, Inc 2026
DOWNLOAD DOCS ABOUT SOURCE PRIVACY
COMING SOON
[click anywhere to close]
Screenshot
[click anywhere to close]