Harden - A security layer for AI coding agents
by•
Harden AIF is a free, local security tool for AI coding agents. Its post-trained model checks tool calls before they run, using your request and session context. It beat frontier models on key agent-security benchmarks, while keeping your repo and tool output on your machine.
Replies
Paste
"Babysitting caps how much work you can hand off" is such a clean way to put it. I also like that it all stays local — a tool that reads every command is exactly the thing you don't want phoning home. Does the model learn anything from what you approve or reject over time?
HTTPDump
the intent-boundary check is the part i'd stress test hardest — real tasks drift too, agent finds it needs to touch a file you never mentioned but that's still correct. curious what your false-positive rate looks like on normal work vs the obvious stuff (rm -rf, exfil). that gap is usually where security layers get disabled by day 3, not where they fail the demo.
The “nervous parent” analogy is painfully accurate. Giving coding agents more autonomy without giving up control feels like the missing piece.
Serand
Does Harden work smoothly with different coding agents, or is it mainly optimized for tools like Claude Code right now?
Premarket Bell
I’m curious how much context Harden looks at before making a security decision. Does it consider the whole session or mainly the current request?