astarii

Automate
your inbox

Astarii are AI agents for your whole computer — the browser, your desktop apps, your files. Tell them what you need in plain English, or train one by doing the task once while it watches. They work in the cloud, in your own browser, or right on your desktop — and you can launch and watch from your phone.

no code · no credit card · free during beta

your astarii

Build a bot once. Send it out forever.

Every Astari is a little light with a name, its own instructions, and the skills you've trained it on — lined up in the sidebar, ready to dispatch.

Astarii
+ New Astari
your astarii
reddit warm-up
Reddit Warm-upday 9
x growth
X Growth3×/day
job hunters
Product & AI31 sent
Customer Success
general
Photo Bot2 skills
Inbox Bot
⌂ Home ◎ Activity

X Growth

cloud · residential IP · 3 sessions a day
Reply with genuine value to fresh posts from accounts in my niche, and post on my topics. No spam, no follow-farming.
ran9:00 AM5 replied · 1 posted6
ran1:30 PM5 replied5
next7:00 PMscheduled
Humanized before posting · never repeats a post · stops on any warning

Work happens all over your computer.
Email in a tab, images in Photoshop, files in folders — Astarii puts agents wherever the work is, so it happens without you.

scheduled · weekdays 07:30 · cloud Email 3 new landscaping leads — one-pager attached live ✓ done in 84s
>web_search"landscaping companies · Austin" · 9 results
>check_seen3 new · 6 already contacted — skipped
>navigateoutlook.com
>fill_loginmaxwell@… · password sealed — never shown to the AI
❙❙needs you"Enter the code Microsoft texted you" → 247… Continue
resumedcode accepted · session saved for next time
>type_textdrafting intro to Rio Grande Landscaping…
>attach_fileone-pager.pdf → attached
>clickSend
done3 intros sent · 0 repeats · transcript saved

capabilities

Everything a task actually needs

Real tasks aren't just clicking. They need logins, files, judgment, and memory. Astarii ships all of it.

Three places to run. One task.

The same Astari runs on our servers 24/7, inside your own browser, or on your desktop driving real apps — and moves between them without losing its logins or its place.

Gets past what stops bots

CAPTCHAs get solved automatically. When a site pushes back, the run escalates to a stealth browser on its own and keeps going, instead of dying on the wall.

Comes from a real home IP

Sensitive accounts run over residential connections, and keep the same one every time — so a site sees the same person signing in, not a datacenter that just appeared.

Pauses when it needs you

Two-factor code? Approval on your phone? The run pauses and asks. You tap Continue, it picks up mid-step — and saves the session so it never asks twice.

Signs in like you

Save logins to a profile. Passwords are encrypted before they leave your browser and typed straight into the site — never shown to the AI, never in transcripts.

Works any app, not just the web

No API needed. It clicks, types, and reads real desktop software the way you do — and you can teach it by doing the task once while it watches.

Never repeats itself

Every task keeps its own memory. Leads contacted, posts surfaced, pages checked — done once means done. Your daily digest never shows a rerun.

Attaches your files

Upload documents to a profile once — a résumé, a one-pager, a price sheet — and the agent attaches them to forms, applications, and emails on its own.

Searches before it browses

Built-in web search returns real results — including inside specific sites — so the agent lands on the right page instead of wandering through one.

scheduling

On your schedule, to the minute

Set a task to run daily, hourly, or on the exact weekdays you choose — in your timezone. It fires on time, does the work, files the transcript.

  • Edit anything, anytime. Reword the task, move the time, switch between cloud, browser, and desktop.
  • Run now. Any scheduled task can be fired on demand with one click.
  • Keep going. Reopen any finished run and send a follow-up — "now reply to the one who answered" — in the same session, still signed in.
  • No reruns. Task memory carries across runs, so repeat schedules never repeat work.

run modes

Three places to put your agent

Same agent, three engines — cloud servers, your own browser, or your whole computer. Pick per task.

cloud

On our servers

computer offfine — runs anyway
watch livefrom any device
2FA & approvalspauses & asks you
logins & filesprofiles + attachments
API keynone needed
pricefree during beta
Start free

extension

In your Chrome

runs inyour own browser
sessionssites you're already in
IP addressyours — home network
API keynone needed
requiresChrome open to fire
pricefree
Download the beta

desktop

On your computer

drivesyour browser + desktop apps
your loginsworks in your real browser
fileszip, organize, attach from disk
trainingdo a task once — it learns
launch & watchfrom your phone
pricefree during beta
Download for Windows

Wherever you are

Dispatch a bot and watch it work from your phone — the dashboard installs as an app. Native mobile is on the way.

dispatches

Written like you'd say it

The task description is the whole program. These all work today.

"Apply to every new job posting that fits my profile — résumé attached."daily · cloud · attach_file
"Email intros to 5 new local leads each morning. Skip anyone we've contacted."weekdays · task memory
"Digest new r/smallbusiness posts about landscaping — never repeat one."07:30 · extension
"Check three competitors' pricing pages and summarize what changed."fridays · cloud
"Fill the vendor form on these 12 supplier sites with our company info."once · profiles
"Watch this product page and tell me when it's back in stock."every 6h · cloud
"Zip the updated folder and email it to me — from my own Gmail."desktop · your real browser
"Remove the white borders from these pages in Photoshop, like I showed you."desktop · trained skill

security

Built like the web is hostile. Because it is.

An agent that reads untrusted pages and holds your logins doesn't get to improvise. Security is the spec.

PI–01

Prompt-injection defense

Page content is data, never instructions. Text on a website telling the agent to do something is treated as exactly that — text on a website. The agent follows you, not the page.

GR–02

Hard guardrails

No purchases, no posting, no deletions, no credential entry — ever — unless you explicitly asked for that specific action. Anything touching money or messaging stays under your command.

KY–03

Passwords the AI can't read

Credentials are encrypted in your browser before they're saved and decrypted only at the instant they're typed into the site's own login form. The model never sees them; transcripts never contain them.

DT–04

Sessions sealed, data scoped

Saved browser sessions are encrypted with AES-256, and every task, transcript, and memory lives under your account with per-user security rules. Your ID reads your data — nothing else can.

VS–05

Visible control, instant stop

Watch the browser live while the agent works. Every step logs to the transcript in real time, and the stop button ends a run mid-action.

faq

Questions, answered

What is Astarii?

Trainable AI agents for your whole computer. Describe a task in plain language — or do it once while an Astari watches and learns — and it carries the work out step by step: browsing in your own signed-in browser, driving desktop apps like Photoshop, zipping and attaching your files. Runs in the cloud, in your Chrome, or on your desktop. No scripts, no selectors, no code.

Does it work when my computer is off?

Yes — cloud runs execute on our servers, so your laptop can be closed. Watch live from any device or read the transcript later. Tasks assigned to the extension run in your own Chrome instead, which needs to be open.

How does it sign in to my accounts?

Save logins to a profile. Passwords are encrypted in your browser before storage and decrypted only at the moment they're typed into the login form — the AI model never sees them and they never appear in transcripts. After the first sign-in, the session is saved so later runs skip login entirely.

What about 2FA codes and approvals?

The run pauses and asks you. The dashboard shows exactly what's needed — tap approve on your phone or type in the code — and the run resumes where it left off. Sessions are saved, so it won't ask again next time.

Can it use my documents?

Yes. Upload files to a profile once — a résumé, a one-pager, a price sheet — and the agent attaches them to upload fields on forms, applications, and emails whenever the task calls for it.

Will scheduled runs repeat work?

No. Each task keeps a memory of every item it has already handled and skips them on future runs. A daily lead sweep only ever contacts new leads; a digest never surfaces the same post twice.

How does Astarii defend against prompt injection?

Everything read from a page is treated as untrusted data, never as instructions, and hard guardrails block purchases, posting, credential entry, and deletions unless you explicitly requested that exact action. Every step is logged and you can stop a run instantly. We treat this as defense-in-depth, not magic — review transcripts for anything sensitive.

How much does it cost?

Free during beta — cloud runs included, no credit card, no API key. The extension is free too; it uses your own OpenRouter key, so you pay only for the model usage you consume. A paid tier will fund development later — early users will be treated kindly.

How do I start?

Cloud: create an account and dispatch your first task from the dashboard — that's it. Extension: download the zip, open chrome://extensions, enable Developer mode, click Load unpacked, pick the folder. A Chrome Web Store listing is coming. Desktop: download Astarii Desktop for Windows, sign in with the same account, and your computer becomes a run target you can launch from anywhere.

Put the web on autopilot.

describe it once · schedule it · watch it work