By role
Platform engineersDesign the paths, review the draftsDevelopersAsk in a sentence, ship the same daySRE and on-callThe cause arrives with the alertHeads of platform and CTOsMake today’s problems impossible tomorrowBy company type
System integratorsForty clients, one practiceSoftware housesSaaS and on-premises, one releaseInfrastructure operatorsDatacenters, tenants, a hypervisor to leaveProductSovereignty
Your platform runs where you choose, under your rules, on Krateo PlatformOps, an open-source control plane you can read. The agents work inside your perimeter. The decision stays with your people.
What lives in your cluster, and the one thing that crosses its edge.
Your cluster, your jurisdiction
In your cluster: your datacenter, a national cloud or the region you pick. On Kubernetes, OpenShift or Proxmox.
Krateo PlatformOpsKrateo PlatformOps in production on premises and on Azure and AWS.The control plane is open source under Apache 2.0. You can read it, audit it and run it without us.
Krateo PlatformOpsLicence as published in the Krateo PlatformOps repository.Yours. Agents act through your access controls and policies. With the gate on, they act as the person who asked.
AGENTIKOSource: Agentic Platform Operations, authority model.Prompts to the model, after secrets are masked. Every call passes one gateway with your policies.
AGENTIKOProvider options pending (dependency 14).You do. Proposals, approvals and changes live in your git and audit trail, with the approver’s name.
AGENTIKOChange requests open in your git host.Everything AGENTIKO produces is a declaration in your git. Switch the agents off and the platform keeps running.
Krateo PlatformOpsReconciliation does not depend on the agents.The model proposes. Your people decide. Your law applies.
These frameworks ask who changed what, who approved it and on what evidence. AGENTIKO writes all three down. The assessment remains yours.
Human oversight: a person approves every change an agent proposes.
Incident and change records with a traceable cause and a named decision.
ICT change and incident records, validated before and reviewable after.
Secrets masked before any prompt, and a clear map of what crosses the edge.
Runs on the qualified infrastructure you already use.
Krateo PlatformOps runs the platform operations and FinOps layers of IPCEI-CIS. With Fondazione ICSC and the Università di Trento, Krateo ran the Sustainable FinOps project, and it partners with Fondazione Bruno Kessler on sustainable cloud and open-source AI. VM Away moves workloads off proprietary hypervisors to Kubernetes and Proxmox.
On a hosted sandbox with a sample company loaded. No cluster or card needed.
On a hosted sandbox with a sample company loaded. No cluster or card needed.
Every client is a different estate, and the best fixes live in the heads of a few senior engineers.
Friday, 17:40
AGENTIKO does the work
Reads the new client’s estate, its clusters, Terraform state and pipelines, maps it to the practice’s blueprints and drafts the onboarding as one change request in the client’s git.
A person decides
Your lead architect reviews the plan on Monday morning and merges it. Onboarding starts the same day.
Tuesday, 03:12
AGENTIKO does the work
Diagnoses inside that client’s perimeter, under that client’s policies. Prepares the cause, the evidence and an ordered fix, and drafts the client’s morning report.
A person decides
Your on-call engineer approves from the phone. The client reads who decided, and on what evidence.
Thursday, 02:00
AGENTIKO does the work
The nightly review finds the same health-check fault in eleven other client environments and proposes the fix as a blueprint update for each of them. It ships inert.
A person decides
Your practice lead chooses which clients receive it, and when.
Your best architect’s judgment, applied to every client.
Developers wait for environments, and every regulated customer who installs on premises turns a release into a project.
Monday, 09:10
AGENTIKO does the work
A developer asks in a sentence. The agent follows the golden path the platform team approved: namespace, database, pipeline and a preview address, validated before it applies.
A person decides
The platform team approved the path once. Every order after that runs inside it, and anything outside it comes back as a proposal.
Wednesday, 11:00
AGENTIKO does the work
Drafts the install for that bank’s target, names every key it needs without reading any, and runs a server-side dry run against the bank’s own policies.
A person decides
The bank’s administrator approves in the bank’s git. The secrets stay with the bank.
Saturday, 22:05
AGENTIKO does the work
Correlates logs, metrics and the tenant’s declaration, cites the file it read and proposes the fix with its rollback.
A person decides
The developer on call approves, verifies, and goes back to Saturday night.
Product engineers spend their hours on the product.
The entities want cloud speed, the law wants the data at home, and the hypervisor renewal grows every year.
First quarter
AGENTIKO does the work
Inventories machines and their dependencies, groups them into migration waves towards Kubernetes and Proxmox, and drafts each wave as a change request with its rollback.
A person decides
Your operations lead signs each wave. Every move has a name next to it.
Any working day
AGENTIKO does the work
Drafts it from the service catalogue. Residency, quotas and network rules are enforced by the control plane before anything applies.
A person decides
The entity’s owner approves. The platform refuses whatever the rules forbid, whoever asks.
Every night, 02:00
AGENTIKO does the work
The nightly review reads queue telemetry and the day’s incidents, then proposes alerts, sizing and documentation changes. It holds no tools.
A person decides
Your capacity planner reads the proposals with the morning coffee and adopts what makes sense.
A sovereign cloud catalogue, with the record an auditor asks for.