Hey Product Hunt! 👋 I'm Azad. I come from a business background, not engineering. I started building Sunglasses in February because I was running AI agents on my own machine and realized nothing checks what they read. Agents treat everything as instructions: files, emails, web pages, tool outputs. Attackers figured this out and write for the AI now, not for you. Sunglasses sits in front of your agent and scans untrusted input before the agent acts on it. What makes it different: - Runs 100% local. No cloud, no account, no telemetry. MIT licensed. - 1,106 tested attack patterns across 69 categories, plus a mechanism layer for shape-level detection. - Honest about limits: we publish what it does NOT catch at sunglasses.dev/what-sunglasses-catches-vs-does-not-catch. A security tool that hides its gaps is worse than no tool. - The benchmark ships inside the repo and reproduces with one command: 78.7% precision, 97.4% recall. Try it in 10 seconds: paste any GitHub repo at sunglasses.dev/scan and see what an AI coding agent would swallow. Or pip install sunglasses. If you break it, tell me. Bypasses become detection patterns with credit to you in the changelog. Ask me anything!

Sunglasses

The input firewall for AI agents

The input firewall for AI agents