Your coding agent works with your code, not your secrets.
zn-gate is the local security layer for coding agents. It guards your secrets, your data and your systems while you use Claude Code, Codex CLI, Cursor, OpenCode, Antigravity or ZCode desktop app. Free, MIT, no account.
npx -y zn-gate initOn your machine: no account · 0.045 ms p50 per check (200 B) · hooks for 6 agents: Claude Code, Codex CLI, Cursor, OpenCode, Antigravity, ZCode desktop app
Optional cloud check: Galvanize 3, 89.6% recall at 0.6% false positives (3,309 test examples)
npx -y zn-gate initnpx -y zn-gate init --wrap-mcpOne gate, three checks
Everything runs on your machine. Nothing leaves it unless you turn on the cloud check. On that optional check, detected secrets are removed on your machine first; personal data is not removed.
Scrubber
Scrubber: secret values stay away from the model
Your agent works with typed placeholders like __ZN_AWS_KEY_1__. The real value is injected only where you allow it, when a command runs. It covers the secrets in your environment and .env files and keys with a known format; see the docs for what it does not catch yet.
agent reads
STRIPE_SECRET_KEY=sk_live_••••••••••••••••
model sees
STRIPE_SECRET_KEY=__ZN_STRIPE_KEY_1__
Galvanize
Galvanize: prompt injection checks
Tool output, files and pages are checked before your agent acts on them. Local rules run on your machine; the optional cloud check uses our open-weights Galvanize model.
check_tool_result
README.md · allowed
fetched page · blocked: hidden instructions
checked on your machine, before your agent acts
Scan
Scan: audit what your agent is about to trust
One command checks prompt templates, AGENTS.md and SKILL.md files and configs for injection traps and leaked secrets. It exits with code 1 when it finds something, so it also works in CI.
$ npx -y zn-gate scan .
Findings (2):
AGENTS.md:14 Threat
.env:3 Secret found
exit 1
For teams, and how we measure
zn Cloud
zn Cloud for teams: see what every agent did
A shared audit trail of decisions, blocks and evidence across your team. Detected secrets are removed on your machine before anything is sent or stored; personal data is not removed.
Proof
Honest numbers, published with their method
We publish detection figures only together with the test set, the script, the hardware and the date. Galvanize 3 comes with its test results and open weights; Galvanize 2 also has a public benchmark.
Install it now.
Works with Claude Code, Codex CLI, Cursor, OpenCode, Antigravity and ZCode desktop app. Free and open source.
Startup programs we take part in