Compute Engine (IaaS), a platform from Google that allows organizations to create and manage cloud-based virtual machines, is an infrastructure as a services (IaaS).
Computing infrastructure in predefined sizes or custom machine shapes to accelerate cloud transformation. General purpose machines (E2, N1,N2,N2D) offer a good compromise between price and performance. Compute optimized machines (C2) offer high-end performance vCPUs for compute-intensive workloads. Memory optimized (M2) systems offer the highest amount of memory and are ideal for in-memory database applications. Accelerator optimized machines (A2) are based on A100 GPUs, and are designed for high-demanding applications. Integrate Compute services with other Google Cloud Services, such as AI/ML or data analytics. Reservations can help you ensure that your applications will have the capacity needed as they scale. You can save money by running Compute using the sustained-use discount, and you can even save more when you use the committed-use discount.
Learn more
Google Cloud is an online service that lets you create everything from simple websites to complex apps for businesses of any size.
Customers who are new to the system will receive $300 in credits for testing, deploying, and running workloads. Customers can use up to 25+ products free of charge.
Use Google's core data analytics and machine learning. All enterprises can use it. It is secure and fully featured. Use big data to build better products and find answers faster. You can grow from prototypes to production and even to planet-scale without worrying about reliability, capacity or performance. Virtual machines with proven performance/price advantages, to a fully-managed app development platform. High performance, scalable, resilient object storage and databases. Google's private fibre network offers the latest software-defined networking solutions. Fully managed data warehousing and data exploration, Hadoop/Spark and messaging.
Learn more
nono
nono is a novel open-source sandbox that utilizes kernel enforcement to create a secure environment for AI coding agents and LLM tasks. In contrast to traditional policy-based guardrails that merely monitor and filter operations, nono leverages operating system security features—specifically Landlock on Linux and Seatbelt on macOS—to render unauthorized operations impossible at the syscall level.
With just a single command, you can encapsulate any AI agent, including Claude Code, OpenCode, OpenClaw, or any command-line interface process. The system automatically enforces a default-deny policy for filesystem access, restricts harmful commands (such as rm, dd, chmod, and sudo), isolates sensitive credentials and API keys, and extends all imposed restrictions to any child processes, ensuring there's no avenue for escape once limitations are set.
Built-in profiles allow for rapid deployment, and secrets can be injected from the system keystore in a secure manner, with automatic zeroization upon exit. Additionally, future enhancements such as audit logging, atomic rollbacks, and Sigstore-attested policy signing are planned, offering robust tracking and security features.
It operates under the Apache 2.0 license and is developed by the same creator behind Sigstore, further emphasizing its credibility and reliability in securing AI workloads.
Learn more
NullClaw
NullClaw is a highly efficient, ultra-lightweight AI assistant framework crafted in Zig and distributed as a single static binary, enabling it to operate seamlessly on nearly any type of hardware. Its focus is on delivering exceptional performance while minimizing resource consumption, as evidenced by its compact size of approximately 678 KB and a typical RAM usage of around 1 MB, with boot times of less than two milliseconds. By steering clear of traditional runtime overhead associated with virtual machines, interpreters, and complicated dependency chains, it allows developers to deploy agents effortlessly by executing the compiled binary. In spite of its minimal footprint, NullClaw boasts a comprehensive autonomous agent architecture that accommodates over 22 model providers, 18 communication channels, hybrid vector and FTS5 memory, as well as capabilities for streaming, voice, and multi-layer sandboxing. Moreover, security features are inherently integrated, including workspace scoping, explicit command allowlists, encrypted secrets, and robust sandbox isolation through tools like Landlock, Firejail, or Docker. Its design ensures that users can trust the integrity and functionality of their autonomous agents while maximizing efficiency across various applications.
Learn more
