ZN

Its local security layer runs on a developer’s machine between agents such as Claude Code, Codex, Cursor and OpenCode and the systems they access. The software is available under the MIT license, requires no account and makes no network calls by default.

The zn-gate toolkit includes local secret redaction for sensitive information such as API keys, tokens, private keys and database passwords in tool output. It also uses deterministic rules to detect prompt injection in content agents read, supported by the Galvanize-60M model, which has open weights. Its Scan tool audits MCP servers, prompt templates and skills through the command line, CI or a web interface. Packages are available for Node.js and Python, with a Rust core and a local audit log.

Optional paid offerings include cloud-based analysis using a larger model and team controls in private beta. Cloud use is opt-in, and secrets are redacted locally before prompts are sent.