Zero Trust for AI Agents
Every AI coding agent starts with full access to your machine. grith intercepts every system call — file, network, process — and evaluates it against 10+ independent security filters before execution. Wrap any CLI tool with grith exec.
$ curl -fsSL https://grith.ai/install | shAI agents have a security problem
The tools developers trust most have the weakest security foundations.
Your command centre
Terminal TUI, web dashboard, or raw analytics — same telemetry, your choice of interface.
How grith works
Two execution paths, one security pipeline.
Syscall Interception
Every file open, network connection, and process spawn is intercepted at the kernel boundary. Nothing executes without passing through the security proxy.
CLI Supervisor
Wrap any external tool — Claude Code, Codex, Aider — with grith exec. OS-level syscall interception routes every operation through the same security proxy.
Multi-Filter Scoring
Every tool call passes through 10+ independent security filters. A composite score determines: allow, review, or deny.
Quarantine Digest
Uncertain calls are batched for review — not one-by-one interruptions. 80-90% auto-allow, 1-5% auto-deny, the rest queued.
Every tool call, evaluated
Tool calls flow through the multi-filter security proxy — scored, routed, and logged.
See the scoring proxy in action
Every tool call is evaluated by multiple independent filters. Watch how different requests score.
fs.read("package.json")What developers actually see
After every agent session, a clear summary. No digging through logs.
Session complete — 23 actions │ $0.82 │ 100% allowedTool calls: 23 Cost: $0.82 ├─ file_read 12 Provider: Anthropic ├─ file_write 6 Model: Claude Opus ├─ shell_exec 4 Duration: 4m 23s └─ net_request 1Security: Quality: ├─ Allowed 23 (100%) ├─ Build success ✓ ├─ Quarantined 0 ├─ Tests passed ✓ └─ Denied 0 └─ Errors 0No other agent has native security
grith is the only open-source, local-first, model-agnostic agent with architectural security.
| Feature | grith | Cline | Open Interpreter | Aider | Goose | Claude Code | Codex |
|---|---|---|---|---|---|---|---|
| Per-syscall interception | ✓ | — | — | — | — | Coarse | Container-level |
| CLI supervisor | ✓ | — | — | — | — | — | — |
| Multi-filter scoring | ✓ | — | — | — | — | — | — |
| Model agnostic | ✓ | ✓ | ✓ | ✓ | ✓ | — | — |
| Local-first | ✓ | ✓ | ✓ | ✓ | ✓ | — | — |
| Open source | ✓ | ✓ | ✓ | ✓ | ✓ | — | ✓ |
| Quarantine digest | ✓ | — | — | — | — | — | — |
| Per-call security evaluation | ✓ | — | — | — | — | — | — |
| Live web dashboard | ✓ | — | — | — | — | — | — |
| Analytics & compliance | ✓ | — | — | — | — | — | — |
Get started in 30 seconds
One command. Zero configuration required.
$ curl -fsSL https://grith.ai/install | sh