GuardRail adds deterministic safety hooks between Claude Code and your shell. High-risk command patterns are denied before execution; safe commands continue normally.
$ npx guardrail-agent init
Request preview
Claude Code supported today · Other agent integrations are not yet released
AI coding agents are powerful because they can execute any command. That is also why they are dangerous. One wrong assumption, one hallucinated flag, one misunderstood instruction.
It connected to the production database instead of test. The table had 12,000 user profiles.
API keys, database passwords, SMTP credentials appeared in the conversation. The context window became a security incident.
It force-pushed to the production branch, overwriting three days of team commits.
GuardRail installs as pre-execution hooks in your AI coding agent. Every command passes through the guard chain before it runs. No dashboard, no YAML files, no SaaS dependency.
One command adds GuardRail to your project. It configures the hooks directory and installs 10 core security guards.
$ npx guardrail-agent init
Your AI agent runs commands as usual. GuardRail checks each one against the guard chain. Safe commands pass through without delay.
When a command matches a known dangerous pattern, GuardRail blocks it before execution. The agent sees why it was blocked and adjusts.
Ten readable MIT-licensed rules for common high-impact mistakes. Public source release follows after the private security review.
Blocks direct push to main/master, force push, and git reset --hard.
Blocks env, printenv, /proc/environ, docker inspect without --format.
Blocks exfiltration to webhook.site, requestbin, pipedream, and similar services.
Blocks rm -rf on /etc, /usr, /var, /home, and other critical system paths.
Blocks iptables flush, ufw disable, nft flush ruleset.
Blocks stop/disable/kill on sshd, docker, postgres, nginx, and other critical services.
Blocks UPDATE/DELETE without WHERE clause on protected database tables.
Detects full environment dumps in command output and flags the exposure.
Detects prompt injection attempts in command output before they reach the agent.
Catches empty catch blocks in payment, webhook, and cron code during file edits.
GuardRail was not designed on a whiteboard. It was extracted from a production system that runs AI coding agents across multiple live applications. Every guard exists because something went wrong.
Each guard was written after a real event. Database wipe, secret leak, firewall disabled, production branch overwritten. The patterns come from what actually happens, not what might.
The underlying guard patterns run across a multi-app infrastructure. The public Core has a separate release suite, including real dispatcher payloads and safe-command controls.
The 10 core guards are MIT licensed and free. The Pro tier adds 48 additional guards for advanced threat patterns. Both tiers run the same architecture.
Core guards catch the obvious threats. Pro guards catch the subtle ones: multi-step attacks that look harmless individually, agents disabling their own safeguards, PII leaking through unexpected vectors.
Scans agent outputs for personal data across 10 EU countries. Detects IBAN, tax IDs, names, addresses. 3-tier classification: SICHER, PRUEFEN, FREI.
Structured JSONL logging of every agent action. Daily file rotation, configurable retention. The evidence layer for compliance reporting.
Maps technical controls to governance requirements, records limitations, and highlights gaps that still need organizational or legal assessment.
Tracks command sequences across a session. Detects coordinated reconnaissance patterns that single-command guards miss.
Detects when an AI agent attempts to modify, disable, or circumvent its own security guards. A real pattern we discovered in production.
50+ attack patterns to validate your guard chain. Profile escape testing. Bypass persistence checks. Generates a structured report.
Need a compliance package for your organization?
€4,900 one-time
Compliance Kit: Guard configuration for your stack, EU AI Act gap analysis, documentation templates, 2h setup call.
Request Compliance KitA coding agent is not automatically a high-risk AI system under the EU AI Act. Classification depends on intended purpose and context. GuardRail contributes technical controls and evidence to a broader governance program; it is not legal advice and does not create compliance by itself.
Guard classification per risk level. PEN-test framework for validation. Risk-based guard activation per command profile.
PII gates help prevent secret exposure. Environment dump detection. Container inspection controls.
Timestamped audit log. Every blocked command recorded with guard name, reason, and session context.
Pre-execution gates block before damage occurs. Approval workflows for critical operations.
Injection defense. Regression test suite. Continuous validation of guard accuracy.
Get the ten-rule Core, the threat model, and the release test evidence before the public open-source launch.
$ npx guardrail-agent init
Request preview