We check every product on this page once a day and record whether it still answers.
Local macOS scanner that blocks secrets and PII from leaking into AI coding-tool prompts, for engineers who don't want to rely on cloud DLP.
FreeWorks offline
What to know▼
How it works
A macOS app that scans prompts in real time before they reach AI coding tools like Cursor, Claude Code, and Copilot, flagging leaked API keys, credentials, and PII using 47 local detection rules in under 50ms.
What's different
Detection happens on-device before data leaves the machine, and uses soft notifications instead of hard blocks so it doesn't interrupt the coding flow.
Pricing
Free 15MB macOS application for engineers; an early-access dashboard is offered separately for organizations.
Best for
Engineers using AI coding assistants who want to avoid pasting live secrets into prompts.
We check every product on this page once a day and record whether it still answers.
Open-source malware scanner and runtime guard for AI agents
FreeWorks offlineOpen source
What to know▼
How it works
Vets AI agent skills and MCP servers for malicious behavior before install, scans what's already installed, and blocks hijack attempts at runtime, using 768 open ATR rules.
What's different
Scanned 96,096 published skills and found 751 malicious; rules already merged into Microsoft, Cisco, MISP, and OWASP tooling.
We check every product on this page once a day and record whether it still answers.
Local firewall binary that sits between AI agents and the network to block secret leaks, prompt injection, SSRF, and MCP tool poisoning, for developers running autonomous agents, producing a signed offline-verifiable receipt instead of blind trust.
No sign-upWorks offlineOpen source
What to know▼
How it works
A single Go binary scans every outbound request from an agent and writes a signed receipt you verify offline against a published key when it blocks something.
Pricing
Apache 2.0, install via brew.
Best for
Developers whose AI agents have shell access, secrets, and an open line to the internet.
We check every product on this page once a day and record whether it still answers.
Local-first Terraform scanner that audits cost, security and reliability in one pass with no upload, MIT licensed.
No sign-upWorks offlineData stays with you
What to know▼
How it works
Scans Terraform locally for security, cost, reliability, and governance issues in one pass, and writes the patch when a cost fix and a security risk hit the same resource.
We check every product on this page once a day and record whether it still answers.
A browser extension that scans pages you visit for exposed API keys and secrets (OpenAI, AWS, Stripe, GitHub, Google) entirely locally. Built for developers and security engineers guarding against credential leaks.
Works offlineData stays with you
What to know▼
How it works
A browser extension that scans pages you visit for exposed API keys and secrets from providers like OpenAI, AWS, Stripe, GitHub, and Google, checking the DOM, scripts, and network responses.
What's different
Scanning happens 100% locally — nothing leaves your browser.
Best for
Developers and security engineers who want to catch accidentally exposed credentials while browsing.
We check every product on this page once a day and record whether it still answers.
A browser-based static code security scanner for Python and JavaScript that runs entirely offline with no install, aimed at developers checking for vulnerabilities missed by tools like Semgrep.
Nothing to installWorks offline
What to know▼
How it works
Paste Python or JavaScript code into the browser and it runs a static security analysis (SAST) entirely offline, with no install required.
What's different
Runs 100% offline with no install, and is positioned to catch vulnerabilities that tools like Semgrep and CodeQL miss.
Best for
Developers who want a quick, local vulnerability check on a code snippet without setting up a full scanning pipeline.
