Every company you run, looked after.
See what needs you across every company.
Bunny Ops is one console for founders who run several companies. Agents watch your inbox, deploys, domains and payments for each one, and you hear from them only when something needs you.
Needs you 6 items across 4 companies
Look after every company in your litter
Each company gets its own connections, vault, agents and audit log. You switch between them in one click, or see everything that needs you in a single queue.
A queue ordered by urgency
Every item is tagged Now, Today, This week or FYI. You open the console and know what comes first.
Separate by company
Keys, mail, repos and accounts for one company never mix with another. Adding a company starts a clean set.
Pinged only when it matters
Routine work gets done and logged. You get a push for Now items and a quiet digest for the rest.
Connections
Hosting, DNS, mail, payments and code, connected once.
Secrets vault
Keys live in the vault. Agents get scoped access, never a copy.
Agents
Triage, drafting and watching, set to the mode you choose.
Audit log
Every action, who or what did it, and what it touched.
One agent reads. A different agent acts.
Mail, posts and webhooks can contain instructions written by strangers. So the agent that reads them never holds a key, and the agent that holds keys never reads them. Mail is collected by a plain fetcher with no AI, which holds the only read token.
Reader
holds no keysReads untrusted content for one company and writes down what it found.
- Mail from the fetcher, posts, webhooks
- Summarizes and proposes an action
- Holds no credentials, cannot call any service
Approved, schema-checked action
The proposal becomes a fixed action type with typed fields. Anything outside the list is dropped, and the mode decides who approves.
- Free text cannot carry commands
- Mode applies: Auto, Do & tell, Ask first
- Passkey for money, DNS, publishing and other irreversible actions
Actor
holds scoped keysPerforms the checked action and nothing else, then writes it to the audit log. No shell and no free-text commands.
- A fixed list of typed actions
- Runs on Bunny Ops's own isolated runtime, one sandbox per company
- Never reads raw mail or posts
The action runs and is logged. Good for safe, routine work like labeling mail or restarting a failed job.
The action runs, and you get a short note right after. You can undo it for 10 minutes where the service allows.
The action waits in your queue until you approve it. This is the default for anything new.
Money, DNS, public posts and irreversible actions always ask first. They cannot be set to Auto, whatever the mode on that agent. Approving them needs your passkey, as do revealing a secret and inviting someone. Ordinary approvals are one tap.
Connect the tools each company already uses
Connect once per company. Each connection gets the narrowest scope that does the job, and you can revoke it from the console. Mail starts with Microsoft 365. Registrars like GoDaddy get renewal reminders only; agents never change them.
WorkOSSSO, directoryKeep each company's public side in order
The same console that watches your infrastructure also keeps track of what you publish and what you own.
Marketing
A calendar, drafts and listening for each company, kept apart from the others.
- Calendar and drafts. Plan posts per company and review drafts in the queue.
- Listening. Watch X, Reddit and Hacker News for mentions and threads worth a reply.
- Own accounts only. Posts go out on X and Reddit from the company's own accounts, with your approval.
- Claims checks. For regulated companies, drafts are checked against your claims rules before they reach you.
Assets
Everything each company runs, listed in one place, with who owns it and where it lives.
- Websites and apps. Domain, host and latest deploy next to each other.
- Repos and dashboards. Linked from the company, not scattered across bookmarks.
- Renewals and expiry. Domains, certificates and subscriptions show up before they lapse.
- Handover ready. A clear list when you hire, sell or step back from a company.
Built so one bad email cannot spend your keys
Agents are useful because they act for you. The design limits what any single agent can do and keeps a record of all of it.
Reader and Actor split
The agent that sees untrusted content holds no keys. The agent with keys only runs checked actions.
Passkeys
Sign in with a passkey on auth.bunnyops.io. Money, DNS, publishing and other irreversible actions ask for it again before they run. SSO is available on Studio and Portfolio.
Full audit log
Each action is recorded with the agent, the company, the mode and the result. You can filter, search and export it.
Pause or revoke per company
Pause stops new runs and keeps connections. Revoke everything is the kill switch: it cuts every token at once. Other companies keep running.
Own encryption key per company
Each company's data is encrypted with its own key, so companies stay separate at rest as well.
Scoped secrets vault
Keys sit in the vault. Actors request the one they need for one action, and it is not handed to the Reader.
Priced by the number of companies you run
Every plan includes all connectors, the vault, both agents and passkey sign-in. Pay yearly and get two months free.
Solo
For a founder with one company.
- 1 company
- $25 of agent usage each month
- All connectors and the vault
- Passkey sign-in
Founder
For a founder running a few companies.
- Up to 3 companies
- $60 of agent usage each month
- Everything in Solo
Studio
For studios and portfolio founders.
- Up to 15 companies
- $250 of agent usage each month
- Roles: Owner, Operator, Viewer
- SSO and shared approvals
- Everything in Founder
Portfolio
For larger portfolios and holding companies.
- More than 15 companies
- Custom agent usage and limits
- Security review documents
- Priority support
- Everything in Studio
Agent usage beyond what your plan includes is billed at the end of the month. You see usage per company in the console and set a monthly cap, so there are no surprises.
Questions founders ask
How is my data handled?
Each company's data is encrypted with its own key and kept apart from your other companies. Secrets live in the vault, and agents only get the scope they need for one action. The details are on the security page.
What can agents never do?
They cannot move money, change DNS, post publicly or take another irreversible action without asking you first and getting your passkey. They have no shell and cannot run free-text commands, only a fixed list of typed actions. They cannot read untrusted content and hold keys at the same time. They cannot act outside the connections and scopes you gave a company, and they cannot touch another company's data.
Can I stop everything quickly?
Yes. Each company has two controls. Pause agents stops new runs and keeps every connection, so you can resume later. Revoke everything is the kill switch: it stops all agents and revokes every token at once. Other companies are not affected, and the audit log shows what ran before you stopped it.
Which mail does it work with?
Microsoft 365. Bunny Ops does not connect to Gmail and never asks for access to Google mail.
Which accounts do posts go out from?
Only the company's own X and Reddit accounts and newsletter that you connected. Public posts always ask first.
Can I cancel anytime?
Yes. Plans are monthly and you can cancel whenever you like. You can export your audit log and asset lists before you go.
Run every company from one queue
Sign in, add your first company and connect the tools it already uses.