HeimWall vs Runeward

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading...

This creates a starter policy, validates the local runtime, proves one allow and one pre-execution denial, and verifies the signed audit trail.

About HeimWall

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading their prompts. Nothing sits in your send path, your prompt reaches the tool untouched, and what you type into an AI tool is never sent to us. To read your prompt before it is sent, the app reads the composer through the macOS Accessibility API and watches the clipboard. Accessibility is a wide permission and macOS does not offer a narrower one for this.

About Runeward

This creates a starter policy, validates the local runtime, proves one allow and one pre-execution denial, and verifies the signed audit trail. Built-in, CEL, OPA/Rego, and signed OCI policy bundles render allow, deny, or require-approval for each action. The docs use familiar terms first: sandbox, policy, approvals, signed audit trail, network controls, budgets, and agent group . Runeward is open source under the Apache License 2.0.