Agentic. Secure.
Local-first.

An AI agent that actually does things — files, shell, browser, desktop, schedules — running on your own hardware, against local models or any provider you choose. Nothing leaves the building unless you say so.

Detecting your platform…
Genie

What it does

Runs local

Point it at LM Studio, Ollama, vLLM, or your own OpenAI-compatible endpoint. Cloud providers optional, never required.

Works offline

No account, no sign-in, no service to be cut off from. Load a local model and the whole thing runs with the network off.

Actually does things

Files, shell, browser, desktop control, scheduled jobs, and multi-agent dispatch — every action behind a permission gate.

One memory

Notes and a knowledge graph in a single semantic store, so it remembers across conversations and you can see exactly what it knows.

Security

An agent with real power
needs a real gate.

Most agents ask you to trust a model with your shell. Genie assumes the model can be wrong — or manipulated by something it reads — and puts every dangerous action behind a boundary it cannot talk its way past.

You approve what matters

Writes, deletes, shell, and desktop control stop and ask before anything runs. Catastrophic actions are refused outright rather than offered for approval.

It stays where you put it

The agent works inside the folders you choose. Your credentials and keys stay out of reach — including from a raw shell command it writes itself.

Your data stays yours

Conversations and memory are encrypted at rest and tied to your machine. No telemetry, no account, no third party in the loop unless you put one there.

Closed by default

Nothing is reachable from outside your machine unless you deliberately open it, and a web page you happen to be visiting can't reach in.

Hostile input is expected

Anything the agent reads — web pages, files, tool output — is treated as information, never as orders. Instructions come from you.

Attacked on purpose

Genie is tested by attacking it, not just reviewing it. Every finding is reproduced, fixed, and locked down with a regression test before it ships.

Downloads ·

PlatformSize
Verify your download (SHA-256)
loading…