Codexa for enterprise
Isolation, audit logs, roles, and custom limits for larger organizations.
Codexa is an early-stage product. We are honest about what exists today: strong runtime isolation, encrypted secrets, workspace roles, audit logs, and custom limits by agreement.
A typical workflow
How enterprise evaluations usually proceed.
Step 1: Technical review
Read the security page and ask us anything through the security questionnaire process.
Step 2: Pilot workspace
A Team or Enterprise workspace with agreed limits.
Step 3: Integrate
Connect GitHub, databases, and your own AI provider keys.
Step 4: Roll out
Invite teams with roles; audit logs record membership and billing changes.
Features that matter here
Isolated runtimes
Projects run as an unprivileged user inside Linux namespaces with memory and process limits, never in the web process.
Audit logs and rate limits
Security-relevant actions are logged and public endpoints are rate limited.
Team workspaces
Owner, admin, editor and viewer roles with email invitations and activity history.
Encrypted environment variables
Secrets are encrypted at rest and injected into previews and deployments without being shown in the browser.
PostgreSQL and Supabase connections
Browse schemas and run SQL from the workspace; destructive statements require explicit confirmation.
GitHub import and push
Import an existing repository, commit from Codexa, and push back when GitHub OAuth is configured.
Example project ideas
Starting prompts you can paste into Codexa. Each one maps to a starter template and produces real, editable code.
- Internal tooling prototypes that read from an existing warehouse replica
- A sandboxed environment for evaluating AI-assisted development
- Hackathon workspaces with shared templates and usage limits
- Admin panels for operations teams
Limitations to know about
- AI generation requires an Anthropic or OpenAI API key configured by the operator of your Codexa instance; without one the agent shows a "not configured" state.
- Generated code is a starting point. Review it like any other contribution before shipping to customers.
- Starter templates currently cover single-page React apps, static sites, and Node + Express APIs. Other stacks can be imported from GitHub but have not been tuned for the sandbox.
- SSO/SAML is not available yet. Audit log export and dedicated environments are provided on request under an agreement.
- Codexa holds no third-party certifications (no SOC 2, ISO 27001, or similar) at this time. See security.
Build your first pilot with Codexa
Start on the Free plan. Upgrade when you need more AI requests, runtime, or collaborators.