# HeimWall HeimWall è un’app per macOS e un prodotto di osservabilità per team che rileva segreti, PII e altri dati riservati nei prompt inviati a strumenti di coding AI come Cursor, Claude Code, Copilot e Windsurf. I prompt grezzi restano sul dispositivo per impostazione predefinita e per i report del team vengono condivisi solo segnali redatti. - Findings24: - Sito web: - Prezzi: Freemium - Categorie: Assistente Codice AI, Strumenti Dev AI, Osservabilità dell’IA ## Cos'è HeimWall? HeimWall is a macOS-first observability tool for engineering teams adopting agentic coding assistants. It is designed to detect secrets, PII, and other confidential data in prompts used with tools such as Cursor, Claude Code, Copilot, and Windsurf, while keeping raw prompt text on the engineer’s machine by default. The product positions itself as “signal, not surveillance”: the free individual app stays local-only, and the team product uplifts only redacted metadata so managers can see patterns, trends, and safety scores without reading prompts. The source pages also describe an early-access team workflow, MDM/Jamf rollout, and a tiered pricing model from free solo use to custom enterprise deployment. ## Cosa può fare HeimWall? ### On-device prompt capture HeimWall reads the prompt composer itself on macOS so it can catch text before the AI tool sends it to its own cloud. The source pages describe three capture paths: Accessibility, clipboard polling, and a local TLS proxy. ### Tiered leak detection The detection engine is layered. Deterministic regex rules catch hard-shaped secrets and common PII, and a pretrained on-device classifier can handle fuzzier leaks without training on customer prompts. ### Source-side redaction When a match is found, the raw value is replaced locally before any event is recorded or shared. Team-visible records carry a masked snippet, category, severity, and related metadata instead of the original prompt. ### Separate individual and team modes Individual users get a local-only safety layer with no account and no uplink. Team users enroll the same agent in an organization so managers can see redacted signal without accessing raw prompts. ### Manager and company reporting The team product exposes a manager dashboard with Safety Score, category breakdowns, and per-engineer trends. The pricing page also lists a company control panel for de-identified aggregates. ### Team administration and alerting Team plans add admin and alerting surfaces that the pricing page associates with higher tiers, including SSO, SCIM, SIEM export, Slack, and PagerDuty integrations. ## Casi d'uso ### Solo prompt hygiene An individual engineer can use the free Mac app to catch accidentally pasted secrets or PII before sending a prompt to an AI coding assistant. The app works locally and does not require an account. ### Manager visibility without prompt access A team lead can enroll developers in the team product and review Safety Score trends, category breakdowns, and per-engineer patterns instead of inspecting prompt content directly. ### Managed team rollout A security or platform team can roll the agent out through MDM/Jamf, then layer on organization-level policies, SSO, SCIM, SIEM export, and alerting where those tiers are available. ### Cross-tool observability A company using multiple agentic coding tools can standardize on one on-device detection layer rather than relying on separate native controls from each vendor. HeimWall is positioned as tool-agnostic across the supported apps. ### Enterprise governance review An enterprise interested in stronger governance can evaluate the higher tiers that mention on-prem deployment, BYOK, and SOC 2 Type II materials, while keeping the same detection engine across tiers. ## Domande frequenti ### Who is HeimWall for? HeimWall runs on macOS as a menu-bar app for individual developers, and as an enrolled agent for teams. The free individual app stays entirely on-device, while team use adds redacted signal for a manager dashboard. ### Which tools does HeimWall support today? The source pages explicitly list Cursor, Claude Code, Copilot, and Windsurf at launch. HeimWall instruments the local app rather than using a browser extension, and the FAQ notes that new agentic tools are added over time. ### How do you set it up on Mac? The setup shown for the free Mac app is to download the DMG, move it to Applications, and grant Accessibility so it can read the prompt box in supported AI tools. The product page says the app is signed and notarized and does not require an account. ### What does a manager see in the team product? For teams, the agent sends redacted metadata rather than raw prompts. The manager dashboard can show Safety Score, category breakdowns, and per-engineer trends, and the pricing page says sealed payloads can be opened only with 2FA, written justification, and employee notification. ### How is HeimWall priced? Pricing is split across Solo, Team, Business, and Enterprise. Solo is free forever; Team and Business are per-seat paid plans; Enterprise is custom and includes options such as on-prem deployment, BYOK, and SOC 2 Type II materials. ## Informazioni rapide - **Category**: Developer Tool / Observability - **Platform**: macOS-first; free menu-bar app for individuals - **Primary users**: Individual developers, engineering managers, security leaders - **Core workflow**: Capture on-device, detect locally, redact at source, share only signal for teams - **Launch support**: Cursor, Claude Code, Copilot, Windsurf - **Source domain**: heimwall.ai