Shield
Know the moment an AI gets new access.
Access rarely changes when you're looking. Shield watches for you, and asks if it was you.
What Shield watches
- Agent and MCP configs, checked every 5 seconds
- Mac privacy permissions, checked every 5 seconds
- Browser extensions, checked every 5 seconds
- New AI apps, within a minute
- Keys in plain text, every 15 minutes
Shield compares timestamps, which uses very little power, and rescans only when something changes. It starts at login and stays in your menu bar. Closing the window keeps it running.

What Shield doesn't do
Shield alerts, and it doesn't block. It watches settings and files, not what apps do, so it can't see what an app sends. It runs on your device, and it needs Full Disk Access to read Mac permissions.
Shield comes with the lifetime licence. The scan stays free.