Gate.cat

A deterministic deny-list that sits between an AI agent and the shell, blocking irreversible commands like rm -rf before they execute. It targets developers, ops, and IT teams in B2B settings, especially those deploying AI agents. Unlike LLM-based judges, it uses a fixed policy set, fails closed on errors, and includes a de-obfuscation layer to catch encoded payloads.

Key features

• Deterministic deny-list, not LLM judge
• Fails closed on errors or unparseable input
• De-obfuscates encoded and stacked payloads
• Blocks attempts to kill its own process
• Runs before other safety tools
• Updated daily with new policies
• Open-source core, Apache 2.0
• Zero telemetry