Backed by
Y
Combinator

Visibility and Controls for AI Agents in the Endpoint

Know exactly what coding agents are doing
on your engineers' machines.

Cursor
Claude Code
Every file touched
Network connections
Processes spawned
The problem

What AI coding agents can access

When an engineer runs Cursor or Claude Code, the agent inherits their full system permissions. No sandbox. No restrictions. Every file, every credential, every network connection.

Environment variables & secrets

AWS keys, database credentials, API tokens in .env files — all readable by the agent as context. The agent doesn't need to be malicious. It reads .env to "understand your project" and sends it to the AI provider's API.

$ cat .env AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG... DATABASE_URL=postgres://admin:password@prod.db... STRIPE_SECRET_KEY=sk_live_51H7...
Traditional EDR
ContextFort
Detects malware & known threats
Logs all AI agent activity — malicious or not
Asks: "Is this process malicious?"
Asks: "What did this agent access?"
No concept of AI-generated actions
Built specifically for AI coding agents
Agent self-reported logs
Independent OS-level monitoring
No audit trail for AI actions
Complete audit trail of every agent action
The gap

Why CrowdStrike isn't enough

EDR detects threats. It doesn't audit what AI agents are doing. These are fundamentally different questions — one asks “is this malicious?”, the other asks “what did this agent do?”

The solution

OS-level telemetry for AI coding agents

ContextFort monitors from the kernel — independently of the agent. Built with eBPF on Linux, Endpoint Security Framework on macOS, and ETW + Minifilter on Windows.

File access telemetry

Every file the agent reads or writes — .env, credentials, SSH keys, source code.

Network monitoring

Every outbound connection — what data is sent, where it goes, which process initiated it.

Process tree tracking

Full visibility into every subprocess — shell commands, package installs, builds.

Independent audit trail

OS-level logs the agent can't tamper with. Know exactly what happened and when.