Run open-weight AI models.
Entirely on your machine.
OpenEng downloads, orchestrates, and runs open-weight (open-source) AI models on your own hardware — from any registry, in any major weight format, on the runtime that fits — isolated in a sandbox, never on your bare host. You drive it from the browser over an end-to-end-encrypted channel. Private and local, no telemetry.
Start your engine
openeng serveThin client · renders only · zero secrets
prompt in
tokens out
end-to-end sealed
100% on-device · never leaves the machine
OpenEng's broker only relays sealed frames it can't read. Models, secrets, and code never leave your machine.
OpenEng is an agentic ecosystem for open-weight model execution: it downloads, orchestrates, and runs open-weight (open-source) AI models entirely on your machine.
Built, tested, and real
The architecture
One engine. Many surfaces. Sealed on the wire.
All intelligence and every secret live in a single local process. The browser, the CLI, and future IDEs are thin clients that only render — the only thing between them and your engine is OpenEng's broker, a blind relay that can't read a single frame.
Clients hold nothing
One sealed contract
Why teams choose it
Privacy you can verify, not just trust.
The browser is physically incapable of leaking a secret — because it never receives one. The models run on your machine, and the wire has no field to carry your data off-box.
Crosses the wire
- Your prompt
- Rendered output (tokens)
No field for it to travel through
- Persona
- Memory
- Embeddings
- Secrets
- API keys
- Your code
The wire carries almost nothing
The channel carries only your request and the rendered tokens — no field for prompts, persona, memory, embeddings, secrets, or keys. There is nothing for the browser to leak.
Encrypted end-to-end
The browser-to-engine channel is encrypted end-to-end — the broker that relays it only ever sees ciphertext, even on your own machine.
Thin client, by construction
The browser bundle holds no model and no secret. It cannot leak what it was never built to hold.
The engine
Any registry. Any format. The runtime that fits.
A model is three independent choices: where the weights come from, what format they are in, and which runtime executes them — the format determines which runtimes can run it. Combine several models in one config — a role group — so each job runs on a right-sized model. Local models run isolated in a sandbox; hosted models route through one gateway.
Three axes, one matrix
28 on-device models
- Any registry, any format
- Hardware-aware selection
Private inference, offline
The product
The console runs in your browser. The work runs in a sandbox on your machine.
A thin React client that streams your own engine's work over a sealed channel — engine-owned threads, streaming replies, in-browser permission prompts. No native install for the interface.
- Map the current schema
- Write the migration
- Update the data-access layer
- Update tests + docs
Zero-click connect
No modes — just type
Threads, everywhere
The control plane
Author once. Publish a version. Run anywhere you sign in.
Configure your whole agent platform in the browser, freeze it into an immutable id@version, and every machine you sign in to pulls the exact same setup. No drift.
16 config domains
Immutable, versioned
Secrets never touch it
${ENV} references only — your actual secrets resolve from the local environment, never the cloud.The ecosystem
Don't start from a blank prompt. Start from 3,300+ building blocks.
Browse and snap together agents, skills, templates, models, plugins, cells, and loops — then publish a config your engine just runs. Compose, don't code.
A 3-level org chart — 282 orchestrators delegating to 810 single-purpose agents.
Named, invocable playbooks the engine runs on demand, across 18 categories.
Prompt blueprints prepended above your persona, across 28 segments.
AWS / Azure / GCP connectors — read-only by default, inside your own IAM.
On-device open-weight models, 1.3 GB → 70B — zero API keys.
External decision, approval, and tooling endpoints layered above the security floor.
Agent loop strategies — react, reflection, plan-execute-replan, durable, and more.
Shared connectors, bridges, and tools for the OpenEng product suite.
Under the hood
Intelligent by default. Safe to leave running.
It picks the right brain for every job
- Simple → answers instantly
- Complex → a real multi-step plan
- Up to 28 steps, 4 parallel sub-agents
An agent you can actually leave running
- Kernel-enforced sandbox per worker
- Read-only root, network off
- Destructive actions + downloads → deny
Pricing
Honest pricing. No 'contact sales' wall.
A genuinely useful Free tier today; Pro, Enterprise, and pay-as-you-go are launching Q4 2026 — pay-as-you-go credit tops up from $5.
Free
$0
The full on-device engine
Pro
Soon
Launching Q4 2026
Enterprise
Custom
size it yourself
Your agent is one command away.
Sign in, run openeng serve, and your browser console auto-connects. Everything stays on your machine.
Install the engine
curl -fsSL https://openeng.ai/engine/install.sh | bash