FAQ

No — 100% local. Scanning, Shield monitoring, and Crucible verification all run on your machine. Your source code is never uploaded anywhere.

No — just run the command. npx thuban protect works immediately with no account, API key, or license key for the free tier.

Claude Code, Codex, Cursor, Gemini CLI, and any other AI coding agent. Thuban is agent-independent — it protects the filesystem and execution layer, not any single tool.

Monitors file writes and commands in real time. It watches every file an AI agent creates or edits and every command it tries to run, alerting you the moment something looks risky.

Yes — the free tier is unlimited npx thuban protect. Pro is $9/mo and adds Shield's continuous monitoring plus advanced features.

Thuban watches what AI agents do, not just what code looks like. A linter checks static code style and patterns; Shield gates real file writes and command execution as they happen.

Scanner checks 69 rules across every file in your project — security vulnerabilities (SQL injection, XSS, hardcoded secrets), AI hallucination detection (phantom imports, invented APIs), dead code, and architecture drift. Run it standalone with npx thuban scan or as part of npx thuban protect. Supports 10 languages.

Shield is session-level protection with 5 defence layers: File Guard (protects sensitive files from overwrites), Shadow Realm (sandboxed parse-before-write), Watchers (real-time filesystem monitoring), Execution Gate (human approval for destructive commands), and Audit & Recovery (hash-chained audit trail with instant rollback). It runs while your terminal is open. It is NOT always-on — it dies when the terminal closes.

Crucible is Thuban's adversarial mutation-testing engine. It throws 515 known attack patterns at your codebase across 3 intensity levels (Gentle, Medium, Hell) and measures what your defences actually catch. It runs automatically as part of npx thuban protect. Thuban's own codebase scores 91/100 on its own Crucible Score.

Forge builds defensive rules from real-world incidents. When a new AI agent attack is reported, Forge triages it, generates a candidate detection rule, stress-tests it in Crucible, and ships it as a signed rule pack. 5 signed rule packs have shipped so far, all based on real incidents.

Blackbox is Thuban's forensic recording and explainability engine. It records what an AI agent tried to do and why Shield allowed or blocked it — tamper-evident, chained, and replayable. When something goes wrong, Blackbox reconstructs the incident chain end to end. It uses local open-weight models to analyse hostile payloads without cloud API refusal policies getting in the way.

Intelligence is Thuban's threat intelligence layer. It monitors emerging AI-agent attack reports, distributes signed rule updates to Shield instances, and tiers sources by trust level so low-confidence reports don't poison the rule set.

Time to Defence measures how fast Thuban ships a working defence after a real incident is detected — from detection through Forge triage and rule generation, through Crucible verification, to a signed release. It is a human-driven process, not an automated pipeline.

Roast My Code runs Thuban's scanner against your codebase and turns the findings into a brutally honest, prioritised fix plan. Think of it as a code review that doesn't spare your feelings.

npx thuban protect runs Thuban's full security suite in a single pass: Shield (5-layer session defence) + Scanner (69-rule vulnerability scan) + Crucible (adversarial mutation testing). No install step — just run the command in any project directory.

Three options: npx thuban shield watch runs foreground monitoring (dies when terminal closes). npx thuban shield service start runs as a background process (survives terminal close, dies on reboot). For truly persistent protection, you'd need to register it as an OS service (buildable, not shipped yet).

10 languages: JavaScript, TypeScript, Python, Java, Go, Ruby, PHP, C#, Rust, and C/C++. Scanner rules cover all of them. Shield protects any file regardless of language.

Yes — there's a GitHub Action (npx thuban crucible ci) that runs Crucible as part of your CI pipeline and blocks the merge if detection rate drops below your threshold. Works with any CI system that can run Node.js.

Unlimited npx thuban protect runs — Scanner + Shield + Crucible in a single pass. No account, no API key, no license key needed. The free tier is a genuine one-off checkup, not a trial.

First 30 days free, no card required — just a valid email address. Adds Shield continuous monitoring, full Crucible adversarial testing, and all 69 scanner rules with persistent history.

Yes — your first 30 days of Individual is free. No card required, just a valid email address. After 30 days, you choose whether to subscribe at $9/mo.

Yes — Enterprise is $499/mo for 100+ users, completely self-serve. No ‘Contact Sales’, no meetings, no waiting. Just sign up and go.