# Squidbrake

> Squidbrake is change control for AI agents: agents propose, people approve. It checks every tool call an AI agent makes against your rules and what the agent already did, and allows it, holds it for a second person (with what it will change shown first, such as rows deleted or resources destroyed), or blocks it, before the call runs. Approved deletes can be undone, and decisions land in a tamper-evident log with a one-page evidence pack for auditors. Decisions come from rules, not an LLM.

Squidbrake runs where you run it: a laptop, Docker, or your own cloud. It is backed by Entrepreneur First.

## Start here

- [This site as markdown](https://squidbrake.com/index.md): what Squidbrake does, the incidents it was tested on, how policy works, measured latency, FAQ
- [Quickstart](https://squidbrake.com/docs): install, connect agents, write a policy, block a call
- [PyPI package](https://pypi.org/project/squidbrake/): `pipx install squidbrake`
- [Pricing](https://squidbrake.com/pricing): Free (one person, on your computer), Team $499/month with a 14-day trial, Business and Enterprise priced with you; what is not built yet
- [Security](https://squidbrake.com/security): where it runs, what it stores, how secrets and keys are kept, what it can't stop, compliance mapping (SOC 2 CC8.1, ISO 27001 A.8.32 and A.8.15, EU AI Act Art. 12 and 14), reporting a vulnerability
- [Changelog](https://squidbrake.com/changelog): every release, newest first

## What it connects to

Coding agents (Claude Code, Cursor, Codex, Gemini CLI, VS Code Copilot, Antigravity), agents that connect to MCP by URL (ChatGPT and claude.ai connectors, Devin, n8n), agent frameworks (OpenAI Agents SDK, LangChain, LangGraph, CrewAI, PydanticAI, smolagents, Google ADK), and any MCP server. Support, finance and ops agents go through the same rules as coding agents.

## Evidence

- [Incident replays](https://github.com/batrapulkit/squidbrake/tree/main/incidents): 10 public AI-agent incidents replayed against the shipped rules. 12 of 13 harmful actions stopped, and the one it misses is documented. Run `python incidents/replay.py`.
- [Benchmark](https://github.com/batrapulkit/squidbrake/tree/main/bench/chains): 52 agent sessions through normal permissions and Squidbrake. 30 of 31 harmful sessions stopped with 2 false positives in 34 everyday steps; an allowlist stops 23 with 10.
- [Default policy](https://github.com/batrapulkit/squidbrake/blob/main/rules.yaml): the rules Squidbrake ships with

## Contact

- Email: hello@squidbrake.com
- Book a 30-minute demo: https://calendly.com/pulkitbatra2024/new-meeting-1