Your developers run coding agents with their own keys and their own shell. Give them a gate and a record.
What you can do
- Allow coding agents broadly, with one policy across every agent your teams use.
- Put the risky commands, like deleting, pushing or reaching the network, behind a person.
- Give security one record of what every agent did, on every machine.
What you are saved from
- An agent that deletes, leaks or pushes because a file told it to.
- A hook that crashes and lets everything through: Vaara's hooks fail closed.
- Finding out from a customer what an agent did.
What it costs
Free to download and use, with nothing to sign up for. Paid work, such as a readiness review or a pilot in your own environment, is scoped to your case and priced as a fixed amount agreed before it starts. No subscription, no per-seat fee. Vaara is dual-licensed: free under the AGPL-3.0, or under a commercial licence when you build it into a product you ship closed, run a modified version as a service without publishing your changes, or your policy does not allow copyleft. Write to hello@vaara.io.
What it saves you
- Security review time per agent rollout.
- Incident time when something goes wrong.
- Building a separate guardrail for every agent tool.
Every action ends in one of three states, and leaves a receipt
Allowed
Inside the rules: it goes through.
Needs a person
Unusual or risky: it waits until a person says yes or no.
Refused
Against the rules: it never happens.
Receipt
Every one of the three leaves a signed record of what was decided and why.