On-device prompt capture
HeimWall reads the prompt composer itself on macOS so it can catch text before the AI tool sends it to its own cloud. The source pages describe three capture paths: Accessibility, clipboard polling, and a local TLS proxy.
HeimWall
Freemium
HeimWall est une application macOS et un produit d’observabilité pour les équipes qui détecte les secrets, les données personnelles et autres informations confidentielles dans les prompts envoyés à des outils de programmation IA comme Cursor, Claude Code, Copilot et Windsurf. Les prompts bruts restent par défaut sur l’appareil et seuls des signaux expurgés sont partagés pour les rapports d’équipe.
Qu'est-ce que HeimWall ?
HeimWall is a macOS-first observability tool for engineering teams adopting agentic coding assistants. It is designed to detect secrets, PII, and other confidential data in prompts used with tools such as Cursor, Claude Code, Copilot, and Windsurf, while keeping raw prompt text on the engineer’s machine by default.
The product positions itself as “signal, not surveillance”: the free individual app stays local-only, and the team product uplifts only redacted metadata so managers can see patterns, trends, and safety scores without reading prompts. The source pages also describe an early-access team workflow, MDM/Jamf rollout, and a tiered pricing model from free solo use to custom enterprise deployment.
Que peut faire HeimWall ?
Tiered leak detection
The detection engine is layered. Deterministic regex rules catch hard-shaped secrets and common PII, and a pretrained on-device classifier can handle fuzzier leaks without training on customer prompts.
Source-side redaction
When a match is found, the raw value is replaced locally before any event is recorded or shared. Team-visible records carry a masked snippet, category, severity, and related metadata instead of the original prompt.
Separate individual and team modes
Individual users get a local-only safety layer with no account and no uplink. Team users enroll the same agent in an organization so managers can see redacted signal without accessing raw prompts.
Manager and company reporting
The team product exposes a manager dashboard with Safety Score, category breakdowns, and per-engineer trends. The pricing page also lists a company control panel for de-identified aggregates.
Team administration and alerting
Team plans add admin and alerting surfaces that the pricing page associates with higher tiers, including SSO, SCIM, SIEM export, Slack, and PagerDuty integrations.
Cas d'utilisation
“Solo prompt hygiene”
An individual engineer can use the free Mac app to catch accidentally pasted secrets or PII before sending a prompt to an AI coding assistant. The app works locally and does not require an account.
“Manager visibility without prompt access”
A team lead can enroll developers in the team product and review Safety Score trends, category breakdowns, and per-engineer patterns instead of inspecting prompt content directly.
“Managed team rollout”
A security or platform team can roll the agent out through MDM/Jamf, then layer on organization-level policies, SSO, SCIM, SIEM export, and alerting where those tiers are available.
“Cross-tool observability”
A company using multiple agentic coding tools can standardize on one on-device detection layer rather than relying on separate native controls from each vendor. HeimWall is positioned as tool-agnostic across the supported apps.
“Enterprise governance review”
An enterprise interested in stronger governance can evaluate the higher tiers that mention on-prem deployment, BYOK, and SOC 2 Type II materials, while keeping the same detection engine across tiers.
Questions fréquentes
Who is HeimWall for?
HeimWall runs on macOS as a menu-bar app for individual developers, and as an enrolled agent for teams. The free individual app stays entirely on-device, while team use adds redacted signal for a manager dashboard.
Which tools does HeimWall support today?
The source pages explicitly list Cursor, Claude Code, Copilot, and Windsurf at launch. HeimWall instruments the local app rather than using a browser extension, and the FAQ notes that new agentic tools are added over time.
How do you set it up on Mac?
The setup shown for the free Mac app is to download the DMG, move it to Applications, and grant Accessibility so it can read the prompt box in supported AI tools. The product page says the app is signed and notarized and does not require an account.
What does a manager see in the team product?
For teams, the agent sends redacted metadata rather than raw prompts. The manager dashboard can show Safety Score, category breakdowns, and per-engineer trends, and the pricing page says sealed payloads can be opened only with 2FA, written justification, and employee notification.
How is HeimWall priced?
Pricing is split across Solo, Team, Business, and Enterprise. Solo is free forever; Team and Business are per-seat paid plans; Enterprise is custom and includes options such as on-prem deployment, BYOK, and SOC 2 Type II materials.
Informations rapides
- Category
- Developer Tool / Observability
- Platform
- macOS-first; free menu-bar app for individuals
- Primary users
- Individual developers, engineering managers, security leaders
- Core workflow
- Capture on-device, detect locally, redact at source, share only signal for teams
- Launch support
- Cursor, Claude Code, Copilot, Windsurf
- Source domain
- heimwall.ai
Analyse du trafic de HeimWall
Les données de trafic sont fournies à titre indicatif uniquement.
- Évaluation du domaine
- 2
Alternatives à HeimWall
Diffsmith
apps.mergeable.io
Diffsmith est une application native macOS pour examiner les modifications git locales effectuées par des agents de programmation IA comme Claude Code, Cursor, Codex et Copilot. Ajoutez des commentaires en ligne et renvoyez-les à l’agent sous forme de prompt ou via un serveur MCP local.
AgentConnect
www.agentconnect.md
AgentConnect permet aux équipes d’intégrer des agents ACP comme Claude Code, Codex et Gemini CLI à Slack, Telegram, Discord et GitHub, afin qu’ils puissent prendre en charge des tâches dans les canaux où les équipes collaborent déjà. La solution est open source et auto-hébergeable, avec des rôles, des outils, une mémoire et des déclencheurs configurables pour les workflows des agents.
OOMOL
oomol.com
OOMOL connecte Gmail, GitHub et Notion aux agents IA pour réutiliser les outils autorisés dans Codex, Claude Code et Cursor, avec offres gratuite, payantes et à l’usage.
1Code
1code.dev
1Code est un client visuel open source pour agents de programmation, réunissant Claude Code et Codex avec des flux desktop et web, des revues et fusions Git, et des exécutions en arrière-plan dans le cloud.
HarnessRouter
harnessrouter.ai
HarnessRouter est une couche backend pour agents qui permet aux équipes d’intégrer Codex, Claude Code et Hermes à leur produit via une API unique, sur leur propre infrastructure. Une option cloud gérée est également proposée aux équipes qui préfèrent ne pas exploiter elles-mêmes le runtime des agents.
Trellis
trytrellis.app
Trellis est un framework et une boîte à outils d’IA pour Claude Code et Cursor, avec documentation et ressources GitHub.