HeimWall vs TokenPath

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading...

One API to ground every generated token in its source, for output from any model. TokenPath measures attention directly, not the LLM's self-report, to return...

About HeimWall

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading their prompts. Nothing sits in your send path, your prompt reaches the tool untouched, and what you type into an AI tool is never sent to us. To read your prompt before it is sent, the app reads the composer through the macOS Accessibility API and watches the clipboard. Accessibility is a wide permission and macOS does not offer a narrower one for this.

About TokenPath

One API to ground every generated token in its source, for output from any model. TokenPath measures attention directly, not the LLM's self-report, to return machine-readable, token-level citations your product can act on. You get back a list of attributions: each attribution is an answer span, the corresponding document span, and how confident the match is, enough to highlight it, cite it, or log it in a few lines. For the advanced raw token-by-token map, use /v1/attributions/heatmap .