Secrets stay protected
Accounts, billing, and secrets are handled in one trusted place.
Back to overview
security
Your code, agents, and secrets stay separated.
app.nz keeps your app code, agent commands, and secrets in their own zones, so a problem in one never reaches the others.
$ app keys rotate
What you get
Separate by design
Protected secrets
Scoped access
Sandboxed code
Clear boundaries
Work runs with limits
Builds, deploys, and inference run with only the access they need.
Untrusted code is sandboxed
Agent and app commands run with tight limits on network, files, and time.