Antivirus for AI.
Full visibility, real-time control.

Every AI session is logged with a full timeline of actions — file reads, writes, command executions, and network calls. Browse sessions individually, search by date or severity, and drill into any event for full context. Nothing your AI does goes unrecorded.

Two modes. Passive mode logs every action without interference — ideal for auditing. Active mode enforces your rules in real time, blocking critical actions before they execute and warning on anything flagged. Switch between modes with a single config line.

Every session records token usage and dollar cost. Set warning thresholds to catch runaway sessions before they drain your budget. See cost-per-session, cost-per-day, and cumulative spend over any time range.

After every session, Harpax generates a plain-English summary of what happened, what was flagged, and what was blocked. Export summaries as Markdown, HTML, CSV, or JSON. Feed them into your own tooling or compliance workflows.

Get notified the moment something important happens. Desktop notifications out of the box. Configure webhooks for Slack, Discord, email, or any HTTP endpoint. Filter alert triggers by severity so you only hear about what matters.

Zero telemetry. Zero cloud dependency. All session data lives in ~/.harpax on your machine. No API calls home, no usage tracking, no data sharing. Export or delete your data anytime — you own it completely.