agent has shell + network
Protect what you are building
Find security gaps
before you ship.
Paste the public GitHub repository you are building. Heimdall checks its files and packages, explains every problem in normal words, and shows what to fix first.
Public repositories onlyNo credentials required Try
ILLUSTRATIVE PRODUCT PREVIEW
server exposes 12 tools
env token reachable
unbounded retry loop
AGENTIC RISK REPLAY FIX PATH READY
prompt → tool → secret blocked → guard added_
Agent can reach secrets through tools
⌕✓ User prompt reaches autonomous agent
✓ Agent has filesystem and network tools
✓ Secrets are reachable through runtime env
✓ Patch limits tools and blocks exfiltration
Proposed controls 4 ready
EVIDENCE-LED SECURITY ANALYSIS
See the moment trust breaks.
The Agent Flight Recorder turns invisible AI behavior into a causal timeline. Replay a safe example, contain the dangerous capability, then rerun it to prove where the path stops.
Agent Flight Recorder
ILLUSTRATIVE WALKTHROUGH
Ready to replay a simulated path
ENTRYUntrusted prompt“Summarize this issue…”
→
DECISIONSupport agentChooses a tool
→
TOOL CALLshell.execBroad permission
→
RESOURCEprocess.envSecret reachable
→
OUTBOUNDNetwork requestData could leave
Least-privilege policy inserted here
SIMULATION RECEIPTUnsafe path stopped at shell.exec
Control: tool allowlist · Outcome: secret and outbound nodes are no longer reachable in this model.
Agents propose. Heimdall commits.
Run a poisoned finance-agent workflow end to end. Heimdall compares the proposed action to the human mandate, previews the real consequence, issues a one-use Action Warrant, then commits only the authorized work—with rollback.
Heimdall Action Clearinghouse
LOCAL SANDBOX
READYWaiting for the agent proposal
$ heimdall clear --scenario poisoned-refundReady. No external systems will be contacted.
Security you can actually understand.
Follow one result from source evidence to a verified follow-up. The walkthrough below shows where each decision comes from and how progress is measured over time.
Show Heimdall your project
Paste one public GitHub repository. Heimdall reads selected public files without running the code.
See problems in normal words
Heimdall groups the evidence into a short list and puts the most important problem first.
Know exactly what to do next
Every problem includes a suggested fix, its location, and the evidence behind the warning.
Confirm the problem is gone
After integration, scan again to see what was fixed, what remains, and what changed.
Six useful checks. No security degree required.
Each check produces a plain-language explanation and shows the evidence behind it. Technical details are available when a developer needs them.
Exposed passwords and keys
Looks for private information accidentally stored in public code and hides the sensitive value in the report.
Risky code
Finds code that may run unexpected commands or use untrusted information in an unsafe way.
Outdated packages
Checks the project’s installed packages against a public list of known security problems.
Website basics
Checks visible website details such as secure connections, password forms, links, and third-party scripts.
Connected tools and access
Shows when an automated feature may reach files, websites, commands, or other tools that deserve extra review.
Before and after
Compares scans so you can see whether a problem was fixed instead of simply trusting a suggestion.
Gemini handoff
Give Gemini security context it can trust.
Heimdall prepares a small, structured report containing repository names, redacted evidence, recommended changes, and honest coverage limits. Your source code and secret values are not sent.
- 01 Heimdall finds and groups the real scan evidence
- 02 Gemini explains how it affects your intended use
- 03 Heimdall checks the finished integration again
Understand your project before you ship it.
Scan one public repository, see the problems in normal words, and start with the fix that matters most.