Products
OpenClaw AI Agent
Self-hosted OpenClaw AI agent on hardened Ubuntu. Connect Telegram, Slack or Discord with your own keys.
Hermes AI Agent
Nous Research's Hermes AI agent on hardened Ubuntu, chatting on Telegram with your own model key.
Sushi OpenShell
NVIDIA OpenShell on Graviton: policy-controlled Docker sandboxes behind a private mTLS gateway.
OpenHands Core
Self-hosted OpenHands Agent Canvas with Python, terminal and Git tools, plus optional private Telegram.
Nanobot AI Agent
Self-hosted nanobot agent with a password-protected web UI, workspace file tools and private Telegram.
Agent Zero Core
Focused Agent Zero workbench with file, Bash and Python tools, your own cloud model and private Telegram.
Aider AI Pair Programmer
Terminal AI pair programmer that edits and commits to your git repo, with the model provider you choose.
Goose CLI Agent
Open-source CLI agent that plans tasks, edits files and runs commands on a private instance.
Open Interpreter
Let a model write and run code from plain-English requests, with confirmation before every run.
Tabby Coding Assistant
Self-hosted AI code completion and chat server on loopback; attach the model you choose after launch.
Sushi ML Studio
No-code machine learning in your browser: upload a spreadsheet, train scikit-learn models, predict.
DuckDB Analytics
DuckDB CLI for fast local CSV and Parquet queries, with pinned extensions for reading your S3 data.
Open WebUI
Private ChatGPT-style chat UI for any OpenAI-compatible endpoint, reached through Session Manager.
AnythingLLM RAG Workbench
Self-hosted AnythingLLM workspace to chat with your documents (RAG) using the models you choose.
Flowise
Drag-and-drop Flowise builder for LLM chatbots, RAG pipelines and agents, on loopback-only HTTPS.
LiteLLM Proxy
LiteLLM gateway: one OpenAI-compatible HTTPS endpoint in front of all your LLM providers.
Qdrant Vector Database
Private single-node Qdrant vector database for RAG and semantic search, with a per-instance API key.
Caddy HTTPS Gateway
Caddy reverse proxy, private by default, with a per-instance local CA and automatic HTTPS.
HAProxy Community LTS
HAProxy LTS HTTP load balancer with a password-protected stats page.
WireGuard Private Access
WireGuard endpoint with keys generated on first boot and UDP 51820 closed until you add peers.
Unbound DNS Resolver
Validating, caching DNS resolver that answers on loopback only until you open it up.
OpenSSH SFTP Drop Box
OpenSSH SFTP drop box: key-only users locked to their own folder, with no shell.
Uptime Kuma Monitoring
Uptime monitoring with HTTP, TCP, DNS and ping checks behind a private HTTPS dashboard.
Gatus Status Page
Status page with HTTP, TCP and DNS checks, SQLite history and per-instance TLS.
Fluent Bit Log Gateway
Fluent Bit log gateway with HTTPS ingest, a bounded disk buffer and a local file output.
Vector Log Pipeline
Vector log pipeline with authenticated HTTPS and file ingest, VRL redaction and a disk buffer.
OpenTelemetry Collector Gateway
OpenTelemetry Collector OTLP gateway for traces, metrics and logs, with TLS and file export.
Gotify Notification Server
Private Gotify notification server with a REST API, web UI, live WebSocket stream and history.
Langfuse LLM Observability
Self-hosted Langfuse to trace, evaluate and debug LLM apps, with the full single-node stack.
Valkey Single-Node Cache
Valkey single-node cache with loopback TLS, an ACL user, an LRU memory cap and no persistence.
PgBouncer Connection Pooler
PgBouncer PostgreSQL connection pooler with required client TLS and SCRAM authentication.
NATS Core Broker
NATS Core broker with loopback TLS, per-user subject permissions and the nats CLI.
Mosquitto MQTT Broker
Eclipse Mosquitto MQTT broker with loopback TLS, users, topic ACLs and persistence.
OpenTofu Runner
OpenTofu with a pinned offline AWS provider mirror for validate and plan. Nothing auto-applies.
Ansible Core Runner
ansible-core runner with pinned collections, a localhost inventory and a vault password.
Restic Backup Worker
restic backup worker: daily encrypted backups, a safe restore script and an optional S3 repository.
Rclone Transfer Worker
rclone transfer worker: a daily checksum copy that never deletes, with an optional S3 target.
No product matches that search. Try a broader term or .
How every product works¶
-
1. Subscribe
Pick the product on our AWS Marketplace seller profile. Most products include a free trial.
-
2. Launch
Start an EC2 instance from the listing with your own key pair, VPC and security group. Secrets are generated on first boot.
-
3. Follow the guide
Each product's getting-started page takes you from launch to a working service, then configuration and day-two operations.
Billing runs through your AWS account: the product's hourly software fee plus the usual EC2, EBS and data-transfer charges. Stop any time by terminating the instance.
Need help?¶
Write to info@softwaresushi.com with the product name, its version and your AWS Region. Software Sushi is an AWS Partner; every product is supported by the engineers who build it.