v0.12.13 · Public Beta

Already run Snyk or SonarQube? Good. Thuban protects what happens before their scanners ever see the code.

Keep your existing AppSec stack — Thuban adds the control layer it was never built for: real-time protection for autonomous AI coding agents. Runs 100% locally — your code never leaves your machine. Shield enforces. Scanner finds. Cost Guard stops your AI spend running away. Crucible proves. Forge builds. Blackbox explains.

Terminal

That's Cost Guard, running in the scan above — see how it works →

Get Started Free Stop Runaway AI Spend → See what Thuban does ↓

Runs locally. No signup required. No code upload.

Session-Level Protection

Your agents build. Thuban stands guard.

Real-time enforcement running on every action while your session is open — not a dashboard you check later, a shield that's already there.

Real-time

Active monitoring

0ms

Cloud round-trip

100%

Local-first

Thuban vs Snyk vs SonarQube — see the full comparison →

No install, no config, no signup to try it. Works alongside Claude Code, Codex, Cursor, Gemini CLI and other autonomous coding tools.

Antivirus protects you from malicious software. Thuban protects you from autonomous software builders.

Get Started Free

Copy the command below and run it. No signup, no account, no email required — you'll see a real scan of your own code in seconds.

npx thuban protect

Email is optional — only needed if you want a 30-day trial key that follows you across machines. The scan above already ran with zero signup.

Install once, and every one of these is included — no tiers, no add-ons, no upsells:

Shield — 5 Defence Layers

✓File Guard — pre-emptive snapshots, protected paths, overwrite prevention
✓Shadow Realm — sandboxed execution environment
✓Watchers — real-time filesystem monitoring
✓Execution Gate — command validation before execution
✓Audit & Recovery — hash-chained audit trail, instant rollback

Crucible

✓Adversarial mutation testing
✓Verifies defences catch known attack patterns

Scanner

✓All 69 detection rules
✓10 language support
✓Hallucinated API detection
✓Dependency analysis
✓Trust Score

Forge

✓Builds defensive rules from real-world incidents
✓5 signed rule packs shipped

Cost Guard NEW

✓Catches unbounded AI/LLM loops before they run away
✓Flags missing output token limits
✓Runs automatically in every scan — no flag needed

Additional

✓Blackbox explainability engine
✓Intelligence threat analysis
✓8 Advisor modes (roast, rate, boost, risk, trend, benchmark, onboard, compliance)
✓CLI + MCP integration
✓Works with Claude Code, Codex, Cursor, Gemini CLI, any AI coding agent
✓100% local — your code never leaves your machine
✓Community support

30-Second Demo

See Thuban in Action

Threat detected. Analysed. Defence rule generated.

Real-Time Agent Monitoring

Real-World Incidents & Thuban's Response

INCIDENT TRACKER

Global Incident Feed real CVEs & supply-chain attacks · Last updated: August 2026

DEFCON Threat Level

LEVEL 3Elevated — Active Defences Engaged

Defence Pipeline Status based on real incidents, below

Real Incidents Analysed

Defences Deployed

2,700+

Tests Passing

4h 23m

Avg Time to Defence

Pipeline Status: ACTIVE

Forge Pipeline Stages

1 DETECT

2 VERIFY

3 BUILD

4 TEST

5 DEPLOY

Live AI Threat Response a real run, end to end

Incident Claude / OpenAI / Cursor / MCP exploit pattern detected

Detected 10:42

Forge rule generated 10:49

Crucible test passed 10:56

Protection shipped 11:03

Time to Defence 21 minutes

8 defences deployed • 2 monitoring • Avg TTD: 4h 23m

Incidents shown are real, based on real live testing — not inflated.

What Thuban Does

Stop AI destroying your machine.

Real-time security for AI coding agents. Controls what AI agents can do, verifies what they build, proves defences work. Shield enforces. Scanner finds. Crucible proves. Forge builds. Blackbox explains.

Real-time agent monitoring. Incident-driven defence generation. Every new rule stress-tested before it reaches your machine.

Thuban monitors global threat feeds, identifies what's relevant to AI coding agents, builds defensive rules, and independently proves each one in Crucible, Shield, Scanner and Cost Guard's own tests — then ships automatically, with no human queue in the loop, and updates Thuban for all of our users. Sometimes in just hours following threat detection.

This isn't a roadmap item. It's running right now. Four live feeds: NVD, GitHub Security Advisories, CISA Known Exploited Vulnerabilities, and OSV.

NEW

Contain — Thuban Cost Guard

Catches AI agents that can silently rack up a huge bill — unbounded loops and missing token limits around AI/LLM calls, flagged in every scan.

Protect — Thuban Shield

Real-time interception. 5 layers block destructive AI actions before they hit your disk.

Find — Thuban Scanner

Detect vulnerabilities, phantom imports, and hallucinated code in seconds.

Prove — Thuban Crucible

Adversarial stress testing. Prove your defences work under real attack conditions.

Learn & Build — Thuban Forge

Incident-driven defence generation. Forge turns a threat report into a Shield rule, stress-tested in Crucible before it ships.

Explain — Thuban Blackbox

Incident investigation and explainability. Understand exactly what happened and why.

Measure — Time to Defence

Track the speed from threat disclosure to verified protection deployed. The metric that matters.

Install in 60 Seconds

One command. Full protection.

No install, no config, no signup. Copy, paste, done.

npx thuban protect

Runs Shield, Scanner, and Crucible in one pass — activates protection, checks your codebase, and proves the defences work.

One click to secure your code before it ever compiles.

Advanced: run shield, scan, or crucible separately.

Runs entirely locally. Jump to Get Started ↓ · Read the full Getting Started Guide →

Why Now

The enterprise players are coming. Thuban Shield is already here.

Enterprise agent security solutions are coming — behind procurement cycles, platform lock-in, and six-figure contracts. Thuban Shield is here now, installs in one command, and runs entirely on your machine.

AI is now allowed to write code, run commands and alter machines. Thuban decides what it is actually permitted to do.

Craig, founder of Thuban, holding a Thuban Shield

Dogfooded Daily

“I use Thuban on every venture I build with AI.”

— Craig, founder. The full story →

2,700+

Tests Passing

Signed Rule Packs

14+

Detection Rules

Code Uploads

Pricing

Simple pricing. No surprises.

Free

Individual

$9/mo

First 30 days free. No card.

Popular

Team

$49/mo

Business

$299/mo

Enterprise

$499/mo

See full pricing →

Protect your codebase in the next 60 seconds.

No install, no config files, no signup required.

Free 30-day trial. No card required.

$ npx thuban protect

Click to copy · Advanced: run shield, scan, or crucible separately.

Runs locally. No signup required. No code upload.