# HeimWall

> HeimWall is a macOS app that gives engineering teams an audit trail for AI
> coding tools (Cursor, Claude Code, Copilot, ChatGPT Desktop, Windsurf). It
> reads what engineers type into these tools through the macOS Accessibility
> API, detects secrets and PII on the laptop with 47 deterministic rules, masks
> the evidence before anything is recorded, and writes a tamper-evident log.
> Capture is read-only: the prompt reaches the AI tool untouched. Managers see
> category, severity, tool and counts. Never the text.

Key facts:
- Free macOS app (4.1 MB signed and notarized DMG, macOS 13+, Apple Silicon): detection and warnings, fully local, no account.
- Team tier: org enrollment, manager dashboard, per-org hash-chained audit log, end-to-end encrypted evidence plane, gated Investigation Mode (second factor, written justification, engineer notified, 24h expiry).
- Detection is rule-based (47 hand-written rules with validators), on-device, no model, no network call, built against a 50 ms scan budget.
- By contract, HeimWall data cannot be used in performance reviews.
- The DevGPT scan: 27,075 real developer prompts analysed, 1.12% (303) contained material that should not have left a laptop.

## Pages

- [Home](https://heimwall.ai/md/home): what HeimWall does and how the pipeline works
- [Free Mac app](https://heimwall.ai/md/individual): the individual app, its exact network behaviour
- [How it works](https://heimwall.ai/md/how-it-works): capture, detection, the two-plane record
- [Pricing](https://heimwall.ai/md/pricing): tiers and what ships in each
- [FAQ](https://heimwall.ai/md/faq): direct answers on privacy, security and coverage

## Contact

- founders@heimwall.ai
- Download: https://heimwall.ai/api/download