# AgentWarden

> AgentWarden is "antivirus for AI": desktop security software that watches AI coding agents (Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI and others) on your own computer, compares what they actually do against what you asked them to do, and alerts you when an agent is hijacked by prompt injection, a malicious skill or MCP server, or goes off-task. Made by PRAESI TECHNOLOGIES LTD (Cyprus).

## What it does
- Reads agent session logs locally and judges every command against the user's actual request ("on task", "not part of the task", "looks like an attack").
- Detects indirect prompt injection in content an agent reads (web pages, PR titles, issues, MCP tool results, skills) and escalates the next sensitive off-task action as a likely hijack.
- Catches credential theft, secrets posted to pull requests, data exfiltration, persistence, disabling of security tools, agent self-modification (e.g. switching to no-approval mode) and supply-chain attacks such as publishing packages or installing from unofficial registries.
- Scans installed agent skills, plugins and MCP servers for malicious instructions before they run.
- Decoys and traps (Pro): fake credential files and trails that no legitimate task touches. A hijacked agent that asks for a real key by name can be handed the decoy instead, so it believes it succeeded while the real file is never opened. New decoys arrive with updates.
- Shows on its main page what it protects from (the number of known AI attacks and malicious tools it recognises, counted from its signed updates) and what updates added this week.
- Optional containment: after rehearsing on the user's machine, it can refuse a single dangerous action or pause only a session judged hijacked. It never touches the user's own terminal or remote access (Jump Desktop, RustDesk, Parsec, Chrome Remote Desktop and similar).
- Recognises ~30 AI agents and agentic IDEs, from a signed catalogue updated without app releases.
- Everything is analysed on-device. Code, prompts and transcripts are never uploaded.
- Detection rules are signed, updated continuously, and tested against real 2026 attacks on AI agents. Mac and Windows pass the same checks (over 2,800 each) before any release.

## Platforms
- macOS 14+ on Apple silicon (M1 and later): available now, signed and notarised.
- Windows 10/11: from the Microsoft Store (https://apps.microsoft.com/detail/XP99T6BPX8T56J), signed by PRAESI TECHNOLOGIES LTD. The app keeps itself up to date.
- Linux: in testing.
- iPhone companion app for end-to-end encrypted alerts.

## Pricing (the price shown is the total charged at checkout)
- Free: monitoring on one computer, forever.
- Pro: €14.99/month or €99/year (early-bird: subscribe before 31 December 2026 and the price never rises while you stay subscribed). 20% off the first payment when invited by a friend; the friend gets a free month. Includes supply-chain scanning, tripwires, email and phone alerts, up to 3 devices. 14-day free trial, no card. 14-day money-back promise.
- Pro for Teams: Pro for 2-99 people on one invoice, billed yearly per person with volume pricing (2-4 people €99, 5-19 €89, 20+ €79 each). 3 computers per person, one activation link, a team page to free seats. 100+ people (Enterprise): email operations@praesi.ai.

## Links
- [Website](https://agentwarden.praesi-technologies.com/)
- [Pricing](https://agentwarden.praesi-technologies.com/#pricing)
- [What it cannot do](https://agentwarden.praesi-technologies.com/#honest)
- [Security & vulnerability reporting](https://agentwarden.praesi-technologies.com/security/)
- [Privacy Policy](https://agentwarden.praesi-technologies.com/privacy/)
- [Terms of Service](https://agentwarden.praesi-technologies.com/terms/)
- Support: https://agentwarden.praesi-technologies.com/support/ (report a problem, false alarms, security reports; operations@praesi.ai). In the app: Report a problem, and This alert was wrong on each alert.

## Guides
- [What is antivirus for AI agents?](https://agentwarden.praesi-technologies.com/guides/antivirus-for-ai-agents/)
- [How to secure Claude Code on your computer](https://agentwarden.praesi-technologies.com/guides/secure-claude-code/)
- [How to secure Codex, Cursor and other AI coding agents](https://agentwarden.praesi-technologies.com/guides/secure-ai-coding-agents/)
- [Detecting prompt injection in AI coding agents](https://agentwarden.praesi-technologies.com/guides/prompt-injection-coding-agents/)
- [Checking MCP servers and agent skills for malicious instructions](https://agentwarden.praesi-technologies.com/guides/mcp-server-skill-security/)
- [Full text of the site for AI assistants](https://agentwarden.praesi-technologies.com/llms-full.txt)