Harden AIF is a free, local security tool for AI coding agents. Its post-trained model checks tool calls before they run, using your request and session context. It beat frontier models on key agent-security benchmarks, while keeping your repo and tool output on your machine.
@arcinston Really appreciate that Arush, and we have been excited to get this out too. Harden is free for individual developers. You can just set it up right away using a single command, and it can just fit into your current workflow and existing AI coding agent that you're already using
@daniel_henry4 Hi Daniel, thank you for the question. Harden AIF looks beyond just the current request. It evaluates the pending tool call against the developer's intent and the relevant session history, especially earlier events that can change what the action really means. Hope that answers your question. I'm happy to answer any other question as well.
the intent-boundary check is the part i'd stress test hardest — real tasks drift too, agent finds it needs to touch a file you never mentioned but that's still correct. curious what your false-positive rate looks like on normal work vs the obvious stuff (rm -rf, exfil). that gap is usually where security layers get disabled by day 3, not where they fail the demo.
@maali_baali Hi Maali, Right now, we support 7 AI coding agents, including:
Claude Code
Cursor
Kiro
Codex
Hermes
OpenCLaw
Anti Gravity
Report
Installed it yesterday and tried it against a Claude Code session. Setup took about a minute for three agents.
The thing I'd want to know as a daily user: how oftne does it stop something it shouldn't? Anything sitting in front of every tool call lives or dies on that number..
Also, congrats on the launch.
Harden
Over the last few days, Harden AIF has already blocked 49 risky tool calls 🔥
Feels awesome to finally see something we built out in the wild and doing what it’s supposed to do
Now it’s yours to try, and it’s completely free for individual developers, so give it a shot, push it, break it, and let us know what you think
Huge congratulations to the team 🚀
Bababot
How does Harden handle a tool call when it’s unsure whether the action is safe?
Huddle01 VMs
been waiting on the PH launch for a while
this seems awesome for companies now shipping AI code to also remain secure!
Harden
@arcinston Really appreciate that Arush, and we have been excited to get this out too. Harden is free for individual developers. You can just set it up right away using a single command, and it can just fit into your current workflow and existing AI coding agent that you're already using
Premarket Bell
I’m curious how much context Harden looks at before making a security decision. Does it consider the whole session or mainly the current request?
Harden
@daniel_henry4 Hi Daniel, thank you for the question. Harden AIF looks beyond just the current request. It evaluates the pending tool call against the developer's intent and the relevant session history, especially earlier events that can change what the action really means. Hope that answers your question. I'm happy to answer any other question as well.
HTTPDump
the intent-boundary check is the part i'd stress test hardest — real tasks drift too, agent finds it needs to touch a file you never mentioned but that's still correct. curious what your false-positive rate looks like on normal work vs the obvious stuff (rm -rf, exfil). that gap is usually where security layers get disabled by day 3, not where they fail the demo.
Serand
Does Harden work smoothly with different coding agents, or is it mainly optimized for tools like Claude Code right now?
Harden
@maali_baali Hi Maali, Right now, we support 7 AI coding agents, including:
Claude Code
Cursor
Kiro
Codex
Hermes
OpenCLaw
Anti Gravity