For developers using AI coding agents

Stop your AI agent from leaking your API keys and secrets.

To “help,” coding agents read your .env, your keys, and your environment. A single prompt injection or a misbehaving tool call can send them to an attacker. SigmaShake gates the two paths a secret takes to leak out.

Get startedTry it live. No install

Both paths are gated

  • Reading the secret. When an agent tries to read .env, credentials, SSH keys, or dump the environment, SSG can return DENY, ASK, or FORCE a safer path before the read happens.
  • Sending it out. Egress Guard inspects every outbound request the agent makes, so a secret can’t be quietly exfiltrated to an unknown host.

Deterministic and local, the same across Claude Code, Cursor, and Codex, with a signed audit log of every decision.

30 seconds to protected

1. Install

curl -fsSL install.sigmashake.com | sh -s -- -y

2. Wire it in

ssg init

Running -y accepts the Terms of Service. Turn on the credential rules and Egress Guard during setup; see the docs for the exact rule pack.

Get startedAlso: block destructive commands