Skip to content
covin.dev
Request a demo

For coding agents on your laptop and agents across your company

We secure autonomous agents.

Agents working together is the point. Agents working together against you is the threat.

Right now Covin is looking for payroll opened by an agent that never needed it; a coding agent asked to fix CSS reading your cloud keys; data heading for an address nobody recognises; two agents hiding behind one login; a handoff between teams that never should have happened; a tagged file turning up outside.

Download for MacRequest a demo

IN SIMULATION

7,300+
simulated agent runs per evaluation: 1,310 rule-breaking, 6,014 honest
91%
of rule-breaking agents caught by Covin as it ships today (mean of five seeds, range 87–96%)
1.7%
false alarms with policy checks; 7.6% with the statistical detector on
20 of 20
collusion rings caught in the lab, every member named; 7 false-alarm days in 420

Simulations: scripted agents in a controlled environment, five random seeds, no customer data.

What it does

Watch Covin work

Covin Local is free and guards the coding agents on your laptop. Enterprise covers every agent in the company. Pick a feature and it plays.

  • Local
  • Enterprise
  • Local + Enterprise

Every feature. 12 of 12 shown.

  • Available on:Local + EnterpriseCovin Local and Covin Enterprise

    Local guards the agents on one laptop; Enterprise covers every agent in the company.

    Covin checks each action Claude Code, Codex or Cursor takes against the task you gave it, and can pause or block the ones that drift.

    • Claude Code, Codex and Cursor, on Mac, Windows and Linux
    • Blocks dangerous calls on the spot, even offline
    • Every block comes with a reason
    More about Covin Local →
    Sample agents and events, shown to illustrate the product. Not customer data.

See an investigation

Covin follows what your agents pass to each other, then tells you in plain words whether it's normal, worth a look, or confirmed. Pick a story.

  1. Report agent
  2. Quarterly report
  3. Delivery agent
  1. 01The report agent saves the quarterly report.
  2. 02The delivery agent picks it up and sends it to finance.

Sample agents and events, shown to illustrate the product. Not customer data.

How it works

No agent is asked to report on itself.

  1. 01Watch

    We read the records your cloud already keeps.

  2. 02Connect

    They join into a picture of who handed what to whom.

  3. 03Check

    Anything odd is tested against each agent's job, and against other systems that saw it.

  4. 04Explain

    You get the story in order: what it shows, and what it doesn't.

Built for agents from Anthropic, OpenAI and LangGraph, running on AWS, Google Cloud, Azure and OpenClaw.

Security and deployment

What leaves your account, and what access we need.

YOUR AWS ACCOUNTCOVINCloudTrailAgent gatewayCollectornormalizefingerprintmetadataDetectionInvestigationsDashboardBait workeroptional · approved separately
The bait worker uses its own scoped role, and only placements you approve.
  • Your raw logs and file contents stay in your account.
  • We receive activity metadata and fingerprints you approve.
  • Agent prompts and messages are never needed.
  • Monitoring access is read-only.
  • Bait is optional, separately permissioned, and approved by you.
  • A customer-hosted option keeps everything in your account.
  • Findings separate what your logs show from what we inferred.
What data does Covin need?

Which identity touched which resource, when, and with what result. That comes from cloud audit logs and, if you run one, an agent gateway. File contents are not required.

Does Covin read prompts or resource contents?

In Enterprise, prompts are never sent to Covin. Findings are built from observed activity. Resource contents are not read by default: where a content signal helps, the collector fingerprints it in your account and sends only the fingerprint. Covin reads object contents only if you turn on the AI investigator (off by default) and explicitly allow content reading. (Covin Local has separate opt-in data flows, task titles and rule drafting, described on the Covin Local privacy page.)

Where does Covin run, and what access does it receive?

A read-only collector runs in your AWS account and normalizes activity before it leaves. Detection runs in Covin, or in your account under the customer-hosted option. Bait is permissioned separately.

Pricing

Start with one laptop for free. Add your team when you work together. Bring in the whole company when you need the full picture.

Local

Free

Keeps the coding agents on your laptop on task.

  • Guards Claude Code, Codex and Cursor on your laptop, more agents coming
  • Checks each agent action against the task you gave it
  • You pick the mode: observe, ask or block
  • Blocks dangerous calls on the spot, even offline
  • Spots sessions working together in ways no single session would be stopped for
  • Secrets are stripped before anything leaves your laptop. Prompts stay on your laptop by default (opt-in: a short masked task title to Covin, or a trimmed, masked task to Anthropic for an own-key AI review)

Once Covin Local is installed, connect it to your free account at app.covin.dev to see what your agents did and anything that needs you.

Download for Mac

Install guide →

Teams

Beta

Free during beta

For startups and small teams: every teammate's laptop runs Covin Local and reports to one shared team workspace.

  • Everything in Local, on each teammate's laptop
  • One shared team dashboard at teams.covin.dev
  • Invite teammates by email; resend or revoke invitations
  • Roles: admin, viewer (read-only) or laptop only
  • See agent activity and alerts across the team's laptops
  • Admins write the rules and choose who they apply to
  • Admins get an email when a laptop leaves the team or Covin is uninstalled

Sign in with a link sent to your email, make a team and invite the people you work with.

Start a team

Enterprise

Contact us

Every agent in the company, and what they do together: the workflows nobody authorized, traced from a developer's laptop through CI to your cloud accounts.

  • Everything in Local, across the whole fleet
  • Cross-agent causal graph: laptop to GitHub and CI to cloud and agent platforms (AWS; Azure and OpenClaw in preview)
  • MDM rollout with managed policies users can't disable
  • Hosted, or self-hosted in your own cloud
  • SSO and a full audit trail
  • LLM intent review
Book a call

See what your agents are doing between prompts.

Book a 30-minute demo. Pick a time, leave an email, and that's it.

Pick a 30-minute slot, any day, 6am to 9pm Pacific. Or email us.