Overview
Grengin gives small and mid-sized teams enterprise-grade AI governance with startup-level simplicity. Stand up a branded, multi-LLM chat workspace in about five minutes and give everyone access to OpenAI, Anthropic Claude, Google Gemini, and open-source models through one unified governance layer - no 150-seat minimums, no Microsoft-shop assumptions, and no DevOps project required. Built for IT and finance as much as for end users. Admins get a single dashboard with user management, SSO, and department- and project-level policies. Security and oversight come built in with PII detection and full audit trails, while real-time cost tracking and budget controls cap spend per user, department, or project. Grengin connects to your existing stack through MCP, Jira, Confluence, and Google Drive. Your data stays yours. Run Grengin from source for free, deploy this AWS Marketplace image to your own account in one click, or choose Grengin Cloud if you'd rather not manage infrastructure. With bring-your-own API keys on every path, when you self-host, Grengin is never in your data path, traffic flows directly from your environment to the model providers you choose. It's the middle path between locked-down enterprise suites and ungoverned consumer AI tools: control for IT, insights for executives, AI for everyone.
Highlights
- Multi-LLM, one governance layer: OpenAI, Anthropic Claude, Google Gemini and many open-source models in a single branded chat workspace, live in about five minutes with no DevOps required.
- Control for IT: admin dashboard, SSO, user management, department/project policies, PII detection, and full audit trails, with bring-your-own API keys so your data stays on your own infrastructure.
- Insights and cost control for executives - real-time cost tracking and budget limits per user, department, and project, without enterprise pricing or vendor lock-in.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
|---|---|
t3a.large Recommended | $0.002 |
t3.micro | $0.002 |
c8in.4xlarge | $0.016 |
c8ib.xlarge | $0.004 |
m8a.8xlarge | $0.032 |
m8a.large | $0.002 |
t3.nano | $0.002 |
c7i.large | $0.002 |
c7i.8xlarge | $0.032 |
c8id.12xlarge | $0.048 |
Vendor refund policy
Grengin charges are metered hourly via AWS Marketplace on a pay-as-you-go basis. Because usage is billed in real time, charges are generally non-refundable; however, we review requests case by case, including billing errors or charges caused by a technical issue on our side. To request a refund, request at https://grengin.com/support / support@grengin.com within 30 days of the charge with your AWS account ID and a brief description. Approved refunds are processed through AWS Marketplace.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial AWS Marketplace release of Grengin (v0.3.1). This image provides a ready-to-run, self-hosted Grengin deployment that launches in about five minutes on your own AWS account. You bring your own model-provider API keys, and your data and traffic stay within your environment.
Included in this version:
- Grengin platform v0.3.0, pre-installed and configured on CentOS
- Multi-LLM access to OpenAI, Anthropic Claude, Google Gemini and open-source models through one unified governance layer
- Admin dashboard with user management, SSO, and department/project-level policies
- PII detection and full audit trails
- Real-time cost tracking and budget controls per user, department, and project Integrations: any MCP server, plus Jira, Confluence, and Google Drive
Getting started: After launch, open the instance to complete first-run setup, add your provider API keys, and invite your team. See [https://grengin.com/community ] for configuration and SSO setup. Bring-your-own API keys are required to connect model providers. Future versions will document changes in these notes.
Additional details
Usage instructions
Grengin Usage Instructions
1. Launch the instance
Use at least 2 GB RAM and a 10 GB disk: t3.small (x86_64) or larger. In the security group, allow inbound:
- TCP 80 (HTTP) required; serves the setup wizard and then the app.
- TCP 443 (HTTPS) required only if you enable SSL.
- TCP 22 (SSH) for administration (login user: ec2-user). Tip: restrict ports 80 and 22 to your admin IP during setup. The wizard is unauthenticated until you finish it.
2. Run the setup wizard
On first boot the instance auto-starts a one-time web installer. Wait about a minute, then browse to: http://<instance-public-ip>/ The wizard walks through:
- System check: verifies OS, free ports, RAM and disk.
- Database: install a local PostgreSQL (default) or connect to an existing one (host, port, user, password, database).
- Domain (optional): enter a domain and optionally enable HTTPS (free Let's Encrypt certificate; needs a contact email and the domain's DNS A record already pointing at this instance). On EC2 you can instead claim a free *.grengin.com subdomain offered in the wizard. Skip to run on the bare IP.
- Sign-in / SSO (optional): add Google and/or Microsoft Entra (Azure AD) OAuth credentials, set allowed email domains and just-in-time user provisioning. If you skip this, Grengin's hosted SSO proxy is enabled so you can still sign in.
- AI providers (optional): paste API keys for OpenAI, Anthropic, Mistral and/or Gemini, and tune RAG (retrieval) options. These can be added later.
- Install: click Install. The installer generates unique secrets, writes configuration, installs the API and web app, configures nginx, and creates and starts the application service. When it finishes, the wizard shows your access URL.
3. First use
- App URL: your domain (https if SSL enabled) or http://<instance-ip>/. The API is served under /api.
- There is no default password. The first account you register through the web UI becomes your initial user. JWT and encryption secrets are generated uniquely per instance. Nothing sensitive is baked into the image.
4. Administering the instance
SSH in as ec2-user, then use sudo.
- Service: sudo systemctl status grengin / sudo systemctl restart grengin
- App logs: sudo journalctl -u grengin -f
- Installer logs: sudo journalctl -u grengin-installer Key locations:
- Configuration / environment: /etc/grengin/.env
- API binary: /opt/grengin/grengin-api
- Web app files: /var/www/grengin
- Nginx site: /etc/nginx/conf.d/grengin.conf To change the domain, SSL, AI keys or other settings later, edit /etc/grengin/.env (or use the helper scripts in /opt/grengin/scripts) and run sudo systemctl restart grengin.
5. Security notes
- Finish the wizard promptly. Until you do, port 80 serves an unauthenticated installer. Keep the security group locked to your IP during setup.
- The image enforces IMDSv2 and disables root and password SSH login.
- Run behind HTTPS in production (enable SSL in step 3).
Support
Vendor support
Grengin is developed and supported by Livehopper. For setup, configuration, and troubleshooting, contact [support@grengin.com ] or visit our documentation at [https://grengin.com/community ] and the open-source project at github.com/grengin-oss/grengin. Standard support covers installation, deployment, governance configuration, and integration assistance, with responses typically within one business day. As an open-source platform, Grengin is also backed by public documentation, issue tracking, and an active community for self-service support at any time.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.