Local-first security
See what your AI agent is about to do — before it does it.
PinkyAI sits inside Claude Code and Cowork's own hook system and reviews every command, file edit, and tool call against a set of deterministic rules. It starts in shadow mode, watching and logging without blocking anything, so you can see exactly what it would have flagged before you ever turn on enforcement.
Shadow mode is free and read-only — it never changes what your agent can do. See the trust section below for exactly what stays on your machine.
How it works
- Step 1
Install the hooks
One command wires PinkyAI into Claude Code and Cowork's own hook system — no separate proxy or account required to start.
- Step 2
Watch it in shadow mode
Every rule runs observe-only by default. Nothing blocks. You get a report of exactly what would have fired, against your own real sessions.
- Step 3
Turn on what you trust
Enforce a rule, a category, or all of them, whenever the shadow-mode report has convinced you. Nothing enforces until you say so.
Runs on your machine
Your code, prompts, and API keys never leave your device. The cloud side only ever holds account, entitlement, and signed rule-pack data.
Shadow mode first
Every rule can run observe-only before it enforces, so you decide when — and whether — it starts blocking anything.
Rules you can read
Detection is deterministic and auditable today, not a black-box model — you can see exactly which rule fired and why.
Zero-data, by architecture
This isn't a policy promise — it's how the product is built. Your code, prompts, file contents, and API keys are read and evaluated locally, on your own machine, by rules you can open and read yourself. The cloud side of PinkyAI never receives them: it only ever holds your account, your entitlement, and the signed rule-pack bundles you download. There's no "opt out of data collection" setting, because there's no session content flowing to us to opt out of.
Free in shadow mode. $6/seat once you enforce.
Run shadow mode for as long as you want at no cost. Pay only when you turn enforcement on for a seat — no trial clock, no feature gate on the free tier.