Letting an AI coding agent run commands on your machine is convenient right up until it does something you didn't expect, deletes a file, reads a secret, or reaches out to a server it shouldn't. Grith sits underneath the AI agent at the operating-system level and checks every action before it happens. Grith is an OS-level security supervisor for AI coding agents, including Claude, Codex, Aider, Cursor, Cline, and Copilot, that intercepts Linux system calls, scores each action against 18 built-in security filters covering secret scanning, sensitive-path detection, egress policy, destructive-operation checks, and taint tracking, and automatically allows low-risk actions, queues ambiguous ones for human review, and denies high-risk ones, all through a single wrapper command with no agent-specific integration required. It keeps a hash-chained audit log and can run fully offline. MPL-2.0 licensed, freemium.
| # | Tool | Best for | Price |
|---|---|---|---|
| 1 |  Firejail | Développeurs | — |
| 2 | Développeurs | — | |
| 3 | Développeurs utilisant des assistants IA de code, équipes DevSecOps | — | |
| 4 | Particuliers soucieux de leur vie privée, résidents de Californie, agents IA | — | |
| 5 | Développeurs intégrant des agents IA dans des environnements d'entreprise, organisations avec exigences d'audit | — | |
| 6 | Propriétaires de sites, équipes sécurité voulant un check rapide | — | |
| 7 | Développeurs freelance et agences gérant plusieurs clients | — | |
| 8 | Développeurs et équipes sécurité soucieux de confidentialité, utilisateurs d'agents IA/MCP | — | |
| 9 | Développeurs web ayant besoin de sanitiser du HTML utilisateur, en particulier à fort volume | — | |
| 10 | Utilisateurs Linux ayant des mots de passe stockés dans iCloud Keychain | — | |
| 11 | Responsables ingénierie, équipes IT/sécurité et conformité déployant des agents IA à grande échelle | — | |
| 12 | Équipes IT/sécurité d'entreprise gérant des parcs Windows et Linux, petites structures à grandes entreprises | — |
A security linter built specifically to catch the vulnerability patterns AI coding assistants like Copilot and Cursor repeatedly produce.
Automates removing your personal listings from data broker and people-search sites, for free, without a subscription service.
An API gateway that lets AI agents call GitHub, Slack, or Google Workspace on a user's behalf without ever seeing the real credentials.
Free automated security grading tool that checks a website's external security posture.
Terminal identity manager for freelancers juggling multiple clients, isolates GitHub, Claude, and API credentials per workspace.
A local-first security scanner that checks your machine for compromised packages, leaked secrets, and risky AI/MCP configs, no cloud, no login.
A Rust + WebAssembly HTML sanitizer built to strip XSS attack vectors roughly 70x faster than DOMPurify.
Unofficial client that brings iCloud Keychain passwords to Linux, with a browser extension for autofill.
Open-source governance platform enforcing compliance policies on AI coding agents with full audit trails.
A security toolkit for company IT teams that stops sensitive information from leaking out — whether someone pastes it into a chatbot, points a phone camera at a screen, or tries to brute-force a login.
