Secure your computer and accounts with your AI agent
Choose what your agent checks and copy the prompt into Codex or Claude Code on your computer. Each check updates here as it runs.
Your agent will never see your passwords.
It assesses things indirectly or with aliases, so no sensitive data appears in its chat. For example, it reads the warnings your password manager already shows, which list the accounts without the passwords, and refers to a key in your code by its name, never its value.
It asks its questions in its chat, notes each setting before changing it so the change can be undone, and stops whenever you tell it to.
Software updates
7 checksMost attacks use security flaws that already have a published fix, and updating installs that fix.
- Fixes it
- Fixes it
- Fixes it
- Fixes it
- Fixes it
- Asks before changing
- Fixes it
Computer, browsers, and Wi-Fi
12 checksThese settings decide what other people, devices, and apps can reach on your computer, keep your files unreadable if it’s stolen, and keep a copy in case it breaks.
- Fixes it
- Fixes it
- Fixes it
- Reports only
- Reports only
- Asks before changing
- Asks before changing
- Asks before changing
- Asks before changing
- Reports only
- Reports only
- Reports only
Lock it after 10 minutes without use A good idea if you work in public places or around other people, so no one can use your computer while you step away.
Online accounts and privacy settings
7 checksYour email can reset the passwords for most of your other accounts, so it comes first, then your password manager, bank, and Apple, Google, or Microsoft account. Your agent goes straight to the security and privacy settings of accounts you’re already signed in to. It doesn’t open your messages or files, and it never moves money.
- Reports only
- Reports only
- Reports only
- Asks before changing
- Asks before changing
- Asks before changing
- Fixes it
Code projects
5 checksOnly if you’ve built an app, site, or script, including one you vibe coded. Skipped if your agent finds none. It edits project files only on your computer, and uploads or publishes changes only if you’ve already allowed your agent to, for example in its settings.
- Fixes it
- Fixes it
- Fixes it
- Fixes it
- Asks before changing
Websites and apps you’ve put online
7 checksOnly if you own a site, app, or database that’s live on the internet, whether you built it or use a service like Squarespace, WordPress, Vercel, Supabase, or Firebase. Skipped if your agent finds none. It works from your site’s settings, code, and test accounts rather than your customers’ records, and fixes go live only if you’ve already allowed your agent to publish, for example in its settings.
- Reports only
- Asks before changing
- Asks before changing
- Asks before changing
- Fixes it
- Asks before changing
- Fixes it
AI apps and connected tools
5 checksAn AI app can open or change whatever you connect it to, so each one should have only the access its work needs.
- Fixes it
- Asks before changing
- Asks before changing
- Fixes it
- Reports only
Check your own leaks too?
These free tools look up your email address, saved passwords, and personal details in known breaches and search results. Most ask you to sign in or confirm your email, so you run them yourself, and your agent never sees what they find.
Show each step on this page
Your agent sends this page a short update as each check starts and finishes, straight from the app you run it in, so it doesn’t need a browser. Keep this page open while your agent works. Turned off, your agent reports only in its chat.
- Each check as it happens. It marks each check on this page when it starts and when it finishes, with a sentence about what it found or changed.
- What needs you. Steps only you can take, like approving a change with your computer’s password or restarting, show in the progress panel and under the check they belong to.
- Only this browser can read them. The prompt you copy carries a key that lets your agent add updates to this one audit and nothing else. Each update passes through this site locked so only this browser can open it, and the site deletes it once this page has it.
- Your results. They stay on this browser for 24 hours. You can download them as a text file to keep.