What is Graft Devices?

Graft Devices gives an AI agent hands on your machines below the operating system, through a KVM connection to the machine’s screen, keyboard and mouse. It reaches BIOS and UEFI, boot loaders, login screens, kernel panics and blue screens, frozen or headless machines, legacy terminals and appliances whose only interface is a screen. Every action passes a gate and is written to a signed audit chain.

What stops it doing something I didn’t ask for?

It plans first and shows you the steps. Every action passes a deterministic gate that sits outside the model, and it holds for your approval before anything consequential. You arm it, you can disarm it at any moment, and every session is written to a signed audit chain you can replay. A pre-populated DPIA template ships with it, so your data-protection review starts half done.

Is anything trained on my screens?

No. Nothing is ever trained on your screens. Typed text is never logged, and your secrets never reach the model.

Which AI models does it use?

Your choice. Anthropic, OpenAI, Gemini or a local model, with an allowlist you control for each job.

Request early access at graft.bot/devices. We’re bringing people in a few at a time, and we ask what you’d point it at first so you’re set up for that from day one.

Graft Devices

Give an AI agent hands on your machines, below the operating system.

Graft Devices reaches where remote tools stop: BIOS and boot, login screens, frozen or headless machines, appliances with nothing but a screen. It plans first, asks before anything consequential, and signs every action into an audit chain.

Get early access Talk to us

Also reaches: frozen or headless machines · kernel panics and blue screens · KVM-switched racks · legacy terminals · appliances whose only interface is a screen

Every action passes a deterministic gate and is written to a signed audit chain. You arm it, and you can disarm it at any moment.

Below the OS

Go where remote tools stop.

When the OS is down, the login screen is up, or the box has no API, remote tools go blind and someone has to be in the room. Devices is the pair of hands that’s already there.

BIOS and UEFI

Boot loaders

Kernel panics and blue screens

Frozen or headless machines

KVM-switched racks

Legacy terminals

Appliances whose only interface is a screen

What it does

Four ways to put it to work.

Task

Hand it the job. It plans the whole procedure, shows you the steps, and asks before anything consequential.

Watch

Leave it on the console. On a blue screen, a kernel panic or a stalled installer, it alerts you or runs the recovery you’ve approved.

Inspect

Let it learn the machine. It maps screens, menus and settings once, so every later task starts from knowledge rather than discovery.

Learn

Show it once. An operator demonstrates a procedure one time, and it becomes a task you can run again.

What the agent readsIllustration · a boot-order change in Task moderack-07 · iDRAC 9 · System Setup · frame 5 / 23 · 1024×768

Reads the console the way an engineer does, and asks before it commits.typed text never logged

Controls

Built to pass your security review.

Every action passes a deterministic gate that sits outside the model. Nothing runs on the model’s say-so alone.
A signed, tamper-evident audit chain, so any session can be replayed and proven.
Typed text is never logged, and your secrets never reach the model.
Nothing is ever trained on your screens.
A sanctioned USB identity your endpoint security can allowlist.
Armed only when you say so, and disarmed the moment you decide.
Your choice of model: Anthropic, OpenAI, Gemini or local, with an allowlist you control.

Part of Graft

Graft finds where AI pays off and proves it. Devices is how Graft’s agents reach the machines that have no API.

See how Graft works

Questions

Common questions about Devices.

Early access

Get early access.

We’re opening early access in small groups. Tell us what you’d point it at, and we’ll bring you in as places open up.

Give an AI agent hands on your machines, below the operating system.

Go where remote tools stop.

Four ways to put it to work.

Task

Watch

Inspect

Learn

Built to pass your security review.

Common questions about Devices.

What is Graft Devices?

What stops it doing something I didn’t ask for?

Is anything trained on my screens?

Which AI models does it use?

How do I get it?

Get early access.

Give an AI agent hands on your machines, below the operating system.

Go where remote tools stop.

Four ways to put it to work.

Task

Watch

Inspect

Learn

Built to pass your security review.

Common questions about Devices.

What is Graft Devices?

What stops it doing something I didn’t ask for?

Is anything trained on my screens?

Which AI models does it use?

How do I get it?

Get early access.