HeimWall vs Substructure

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading...

subs is an agent harness for the cloud. It runs an unprivileged agent loop with no system access. It uses MCP servers for tools. It can run locally or as a client and server.

About HeimWall

Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading their prompts. Nothing sits in your send path, your prompt reaches the tool untouched, and what you type into an AI tool is never sent to us. To read your prompt before it is sent, the app reads the composer through the macOS Accessibility API and watches the clipboard. Accessibility is a wide permission and macOS does not offer a narrower one for this.

About Substructure

subs is an agent harness for the cloud. It runs an unprivileged agent loop with no system access. It uses MCP servers for tools. It can run locally or as a client and server. Create the project from the file, then give it your LLM key. Configure the engine to send a webhook to your system and take complete control over the agent loop and Slack agent behavior. You handle a webhook, customizing just the steps you care about.