On-device prompt capture
HeimWall reads the prompt composer itself on macOS so it can catch text before the AI tool sends it to its own cloud. The source pages describe three capture paths: Accessibility, clipboard polling, and a local TLS proxy.
HeimWall è un’app per macOS e un prodotto di osservabilità per team che rileva segreti, PII e altri dati riservati nei prompt inviati a strumenti di coding AI come Cursor, Claude Code, Copilot e Windsurf. I prompt grezzi restano sul dispositivo per impostazione predefinita e per i report del team vengono condivisi solo segnali redatti.
HeimWall is a macOS-first observability tool for engineering teams adopting agentic coding assistants. It is designed to detect secrets, PII, and other confidential data in prompts used with tools such as Cursor, Claude Code, Copilot, and Windsurf, while keeping raw prompt text on the engineer’s machine by default.
The product positions itself as “signal, not surveillance”: the free individual app stays local-only, and the team product uplifts only redacted metadata so managers can see patterns, trends, and safety scores without reading prompts. The source pages also describe an early-access team workflow, MDM/Jamf rollout, and a tiered pricing model from free solo use to custom enterprise deployment.
HeimWall reads the prompt composer itself on macOS so it can catch text before the AI tool sends it to its own cloud. The source pages describe three capture paths: Accessibility, clipboard polling, and a local TLS proxy.
The detection engine is layered. Deterministic regex rules catch hard-shaped secrets and common PII, and a pretrained on-device classifier can handle fuzzier leaks without training on customer prompts.
When a match is found, the raw value is replaced locally before any event is recorded or shared. Team-visible records carry a masked snippet, category, severity, and related metadata instead of the original prompt.
Individual users get a local-only safety layer with no account and no uplink. Team users enroll the same agent in an organization so managers can see redacted signal without accessing raw prompts.
The team product exposes a manager dashboard with Safety Score, category breakdowns, and per-engineer trends. The pricing page also lists a company control panel for de-identified aggregates.
Team plans add admin and alerting surfaces that the pricing page associates with higher tiers, including SSO, SCIM, SIEM export, Slack, and PagerDuty integrations.
An individual engineer can use the free Mac app to catch accidentally pasted secrets or PII before sending a prompt to an AI coding assistant. The app works locally and does not require an account.
A team lead can enroll developers in the team product and review Safety Score trends, category breakdowns, and per-engineer patterns instead of inspecting prompt content directly.
A security or platform team can roll the agent out through MDM/Jamf, then layer on organization-level policies, SSO, SCIM, SIEM export, and alerting where those tiers are available.
A company using multiple agentic coding tools can standardize on one on-device detection layer rather than relying on separate native controls from each vendor. HeimWall is positioned as tool-agnostic across the supported apps.
An enterprise interested in stronger governance can evaluate the higher tiers that mention on-prem deployment, BYOK, and SOC 2 Type II materials, while keeping the same detection engine across tiers.
HeimWall runs on macOS as a menu-bar app for individual developers, and as an enrolled agent for teams. The free individual app stays entirely on-device, while team use adds redacted signal for a manager dashboard.
The source pages explicitly list Cursor, Claude Code, Copilot, and Windsurf at launch. HeimWall instruments the local app rather than using a browser extension, and the FAQ notes that new agentic tools are added over time.
The setup shown for the free Mac app is to download the DMG, move it to Applications, and grant Accessibility so it can read the prompt box in supported AI tools. The product page says the app is signed and notarized and does not require an account.
For teams, the agent sends redacted metadata rather than raw prompts. The manager dashboard can show Safety Score, category breakdowns, and per-engineer trends, and the pricing page says sealed payloads can be opened only with 2FA, written justification, and employee notification.
Pricing is split across Solo, Team, Business, and Enterprise. Solo is free forever; Team and Business are per-seat paid plans; Enterprise is custom and includes options such as on-prem deployment, BYOK, and SOC 2 Type II materials.
I dati sul traffico sono solo a scopo di riferimento.
apps.mergeable.io
Diffsmith è un’app nativa per macOS che consente di rivedere le modifiche git locali apportate da agenti di programmazione AI come Claude Code, Cursor, Codex e Copilot. Aggiungi commenti inline e inviali all’agente come prompt o tramite un server MCP locale.
www.agentconnect.md
AgentConnect consente ai team di integrare agenti ACP come Claude Code, Codex e Gemini CLI in Slack, Telegram, Discord e GitHub, così possono occuparsi di attività negli stessi canali in cui i team collaborano già. È open source e ospitabile in autonomia, con ruoli, strumenti, memoria e trigger configurabili per i workflow degli agenti.
oomol.com
OOMOL collega Gmail, GitHub e Notion agli agenti AI per riutilizzare gli strumenti autorizzati in Codex, Claude Code e Cursor, con piani gratuiti, a pagamento e a consumo.
harnessrouter.ai
HarnessRouter è un livello backend per agenti che consente ai team di integrare Codex, Claude Code e Hermes nel proprio prodotto tramite un’unica API, sulla propria infrastruttura. Offre anche un’opzione cloud gestita per chi preferisce non occuparsi direttamente del runtime degli agenti.
getcargo.io
Infrastruttura GTM per creare agenti, workflow, strumenti e modelli di dati tramite web app, API, CLI e Claude Code.
www.useverse.ai
Verse è una piattaforma per creare dipendenti AI autonomi a partire da prompt in linguaggio naturale. Aiuta singoli utenti e team ad automatizzare il lavoro ricorrente con strumenti connessi, workflow e spazi di lavoro condivisi per gli agenti.