PRIVAKU Shield
BetaBeta: protection is being verified. Please do not rely on PRIVAKU Shield yet. An update is coming.
by PRIVAKU
Stop AI coding agents from touching files and commands they shouldn't.
What it blocks
Your agent asks. PRIVAKU Shield decides.
Every file read, shell command and tool call from your AI coding agent is checked against your rules before it runs.
Dangerous shell commands
Commands like rm -rf on your home folder, or piping a download straight into a shell, are blocked or held for your OK.
Unknown MCP tools
Tool calls to MCP servers you haven't approved are checked.
Unapproved network calls
Uploads and requests from agent commands to hosts you haven't allowed are stopped.
PRIVAKU Shield works at the tool-call layer of supported agents. It doesn't yet stop a program that opens its own network connection directly.
How it works
Three steps. Then it stays out of your way.
Install
Open the download and drag PRIVAKU Shield to Applications.
Pick the apps to protect
Choose your AI coding agents and the folders and sites they must never touch.
Get alerts
When something is blocked, you see what, which agent, and why. Allow it once if you trust it.
Privacy
Your code stays yours.
PRIVAKU Shield checks every action on your Mac against clear rules and a built-in risk check. Your code, files and prompts are not uploaded. For extra protection, technical users can add an optional AI model that spots prompt injection; it runs on your Mac.
No telemetry. The Mac app does not use a PRIVAKU login. PRIVAKU Shield privacy.
Trust
Verify it yourself.
Source-available core
The policy engine, rules format, default rules and agent adapters are published under the PolyForm Shield 1.0.0 licence, so you can read exactly what decides.
Source-available core on GitHub
PolyForm Shield license
Verify the build
Each release publishes a SHA-256 hash. Check the file you downloaded matches:
shasum -a 256 ~/Downloads/Privaku-Shield-0.1.0-beta.dmgSecurity whitepaper
Architecture, threat model, fail-closed design and honest limits.
Report a security issue
Found a way past PRIVAKU Shield? Email security@privaku.com first.
Questions
What does PRIVAKU Shield do?
It checks every file read, shell command and tool call from your AI coding agent against your rules before it runs.
Is it free?
Yes. It is a free Mac beta for macOS 13 Ventura or later.
Does it upload my code?
No. Your code, files and prompts are not uploaded. Checks run on your Mac. No telemetry.
What happens when it stops something?
You see what was stopped, which agent, and why. Allow it once if you trust it.
What are its limits?
It is a beta and protection is still being verified. It works at the tool-call layer of supported agents and does not yet stop a program that opens its own network connection directly.
How do I check the download?
It is signed and notarized by Apple, and each release publishes a SHA-256 you can check with shasum -a 256.
Download
PRIVAKU Shield for Mac. Free.
Developer ID signed and notarized for macOS. Download details
Download for MacAlso from PRIVAKU
PRIVAKU Photos for iPhone.
Private AI Photo Find & Clean. Free, with no ads and no subscriptions.
