intrium in one page, for IT and security
Someone at your company built an app with Claude Code, Anthropic's AI coding tool, and wants an approved place to run it. This is what they are asking you to look at.
Print this page or forward the link. Everything here describes a product that is pre-launch.
What it is
intrium runs internal apps that staff build with Claude Code. A builder runs one command and gets a URL under your domain, such as revenue-dashboard.apps.acme.com. The code runs as written.
- Who can open an app
- Only members of the Okta or Google groups you choose for it. Viewers need no account with intrium.
- Database credentials
- You register a read-only Postgres or Snowflake connection once. It is supplied to the app when it runs. The builder never sees it.
- Files
- An app can instead run on spreadsheets or exports the builder uploads to a private bucket. Earlier versions are kept and you can see every upload.
- What you can see
- A catalog of every app with a named owner and a last-used date, and a log of who deployed what, and when.
- Checks
- Every deploy is scanned for secrets and dependency problems. Apps can reach only the connections you approve.
- Where it runs
- Hosted by intrium on AWS to start. Running in your own AWS account is planned as the Enterprise option.
- Cost
- A flat fee by number of builders, from $300 a month for five, with unlimited apps. People who only use the apps are free. Compute is charged only past the hours included. See planned pricing.
What setup takes
This is the planned setup. We estimate about half a day in total, and have not yet measured it with a customer.
- Connect Okta or Google, so access can follow your groups.
- Delegate one subdomain, such as apps.acme.com. Two DNS records, once. Nothing per app after that.
- Register a read-only database connection. A pilot that runs on uploaded files skips this step.
- If the database is on a private network, install a small agent that lets intrium reach it.
- The builder deploys the first app.
What does not exist yet
- SOC 2 report
- None yet.
- Penetration test
- Not done yet.
- General availability
- No. A small number of design partners.
- Regulated data
- HIPAA, FedRAMP and similar are not supported.
The full list is on the security page. A sensible first step is a pilot on data that is not sensitive. To ask the questions a security review would ask, book a 20 minute call or write to contact@intrium.dev.