Harpax — AI Session Security

Antivirus for AI.
Know what it touched.
Before it's too late.

AI coding assistants are powerful — and unsupervised. Harpax watches every file accessed, every command run, every external call made, and stops anything it shouldn't be doing. For everyone who uses AI. Not just developers.

FOR EVERYONE

Download Harpax

One-click install. Runs quietly in the background. Protects your files and flags anything suspicious — no technical knowledge needed.

Download for Mac / Windows

$9 / month — 14-day free trial, cancel anytime

FOR DEVELOPERS

Install via CLI

Full configuration control. YAML rules, custom detection tiers, webhook alerts, local-only data. Open source, self-hosted option available.

View on GitHub →

git clone github.com/nullevent/harpax && ./install.sh

// FOR EVERYONE WHO USES AI

🛡

File Protection

Harpax watches which files your AI tool accesses. You get an alert the moment it touches something it shouldn't — credentials, private documents, system files.

📋

Session Summaries

After every AI session, Harpax gives you a plain-English summary of exactly what happened. No logs to parse. No technical knowledge needed.

🔒

Stays on Your Machine

Everything Harpax records stays local. No cloud upload, no telemetry, no data sharing. Your sessions are yours — export or delete them anytime.

⚡

Real-Time Blocking

When Harpax detects a dangerous action, it stops it before it runs. Not after. You choose what gets blocked and what just gets flagged.

💰

Cost Visibility

See how much each AI session cost you in tokens and dollars. Know which tasks are worth it and where you're burning budget for nothing.

🔔

Instant Alerts

Desktop notifications the moment something worth knowing happens. No dashboard to check. Harpax tells you when it matters.

Simple, honest pricing.

One plan. Everything included. No usage limits, no feature tiers, no gotchas. The CLI version is free and open source forever — the GUI is for everyone who'd rather just have it work.

Start Free Trial

14-day trialFree

Harpax GUI$9 / month

Harpax CLIFree / open source

Data stays localAlways

Session summariesBoth plans

Custom rulesCLI only

// WHAT A SESSION LOOKS LIKE

harpax — session sess_4f2a19c · claude-code · 14 min ago

09:14:02READsrc/auth/session.rb

09:14:04READconfig/database.yml

09:14:07EXECbundle exec rails db:migrate

09:14:22READconfig/credentials.yml.enc

09:14:23WARNcredentials file accessed — sensitive_file_pattern

09:14:45NETPOST api.github.com /repos/… [200]

09:14:46BLOCKexternal write blocked — severity: critical

09:15:38ENDsession complete · 2 warnings · 1 blocked · $0.34

847FILE OPS

23COMMANDS

2WARNINGS

1BLOCKED

$0.34SESSION COST

// FOR DEVELOPERS — FULL CONTROL

Configurable Rules

YAML-based rule definitions. Custom regex patterns, file path matchers, command blocklists. Your rules, your thresholds.

Webhook Alerts

Slack, Discord, or any HTTP endpoint. Get notified in your existing workflow, not another dashboard.

Data Export

Export sessions as JSON, CSV, or markdown summaries. Pipe into your own tooling, SIEMs, or audit logs.

Self-Hosted

No cloud dependency. No API key required for core functionality. Clone, build, run. MIT licensed.

Passive or Active

Passive mode: log everything, block nothing. Active mode: enforce rules by severity in real time. Switch with one config line.

Semantic Detection

Tier 2 embedding-based detection catches paraphrased attacks that regex misses. Optional ~100MB model download.

// THREE-TIER DETECTION ENGINE

Pattern Matching <1ms

Fast regex detection catches known threat signatures instantly. On by default, no setup required.

Semantic Similarity 10–50ms

AI embeddings catch paraphrased attacks that regex misses. One-time ~100MB model download. Optional.

LLM Analysis Roadmap

Full LLM-powered threat analysis for sophisticated edge cases. Requires API key.

// ACTIVE MODE CONFIG

protection.modeactive

severity.criticalblock

severity.highwarn

severity.mediumlog

tier2.enabledfalse

cost.warning_threshold$5.00

retention.max_age_days30

Antivirus for AI.Know what it touched.Before it's too late.