Install the Baltan agent

Secure by design: a read-only Docker sidecar beside Redis. Port 6379 never opens to Baltan. No MONITOR. Key values never leave your network.

Security model

The agent runs in your network with a least-privilege ACL and pushes sanitized telemetry over HTTPS. Never sent: key values, command args, AUTH secrets.

Start on staging

  1. Create a Baltan account and add a Redis / Valkey database.
  2. Open /app/install for your one-time agent token.
  3. Point the agent at staging first; use --no-scan or lower --scan-limit on large keyspaces.

Docker image

ghcr.io/kartikeytandon/baltan:v0.0.5 — full commands and ACL examples on this page after hydration; also see Install after signup.

Start a pilot · Security & privacy