AgentWall— The Zero-Trust Control Broker for Desktop AI.
Your AI agent doesn’t need to see your secrets. AgentWall sits between your screen and the AI agents working on your machine. It captures what an agent is about to see, detects sensitive data, and shows you a redacted preview — before anything is shared.
AgentWall is not released yet. Sign up now and you’ll get a 90-day free trial when the program launches — plus a short email when it’s ready to download.
Join the waitlist — we’ll email you once at launch with your 90-day free trial. No spam, no selling your address.
The problem
AI agents work by looking at your screen. Your screen shows everything.
Computer-use agents, copilots, and automation tools do their job from screenshots and screen text. That’s useful — until the screen they’re reading happens to hold your Social Security number in an open document, a payment card in a checkout tab, or an API key in a config file.
Once a secret is in a screenshot, you no longer control where it goes: model logs, session histories, third-party servers. Deleting it afterwards isn’t really an option.
AgentWall exists to stand in the middle. Nothing reaches the agent until AgentWall has looked first — and what it finds stays hidden.
What an unprotected screenshot can expose
Everyday items AgentWall is built to catch before an agent sees them:
- CriticalSocial Security numbers in documents, forms, and PDFs left open on screen
- CriticalPayment card numbers on checkout pages, banking tabs, and stored-card screens
- HighAPI keys & tokens in code editors, terminals, and settings pages
- MediumEmail addresses and account details visible in inboxes and profiles
How it works
Capture → detect → redact → approve
Four steps between your screen and your agent. The first three are built and in local testing today; the live approval step arrives with the broker in Phase 2.
Capture
AgentWall takes the screen capture an agent would receive — locally, on your machine, at full native resolution.
Detect
Windows OCR reads the capture on-device and AgentWall’s detectors scan the text for SSNs, payment cards, API keys, and emails.
Redact
You get a preview with every detection covered by a solid bar. The values themselves are never displayed — and never stored.
Approve
Nothing is shared until you say so. You review the redacted result and decide what the agent is allowed to work with.
Phase 1: review in the dashboard. Live approval popups arrive with the broker in Phase 2.
What the agent receives
With AgentWall on, the agent gets the redacted version — enough context to work, none of the secrets.
- Email addressMEDIUM
- Social Security numberCRITICAL
- Payment cardCRITICAL
- API keyHIGH
4 detections redacted · event written to the audit ledger (types & locations only)
Features — Phase 1
Built for one job: keeping secrets off the wire
Everything below is part of the Phase 1 build, running and being tested on a real Windows machine today. Later phases are listed separately on the roadmap — nothing there is presented as available yet.
Local screen capture
Captures the screen at native resolution from the system tray or dashboard, so detection works on exactly what an agent would see.
On-device OCR detection
Windows OCR reads the capture locally, and dedicated detectors pick out SSNs, payment cards (checksum-verified), API keys, and email addresses.
Redacted preview
See the capture the way an agent safely can: detections boxed and covered. The underlying values are never rendered back to you — or anyone.
Hash-chained audit ledger
Every capture and detection is written to a local ledger where each entry is hash-linked to the previous one — a tamper-evident record you can export.
Your policy, your rules
A local dashboard and policy store (kept in a database on your own machine) control what gets flagged and how captures are handled.
Private by design
No account, no cloud, no telemetry of your screen. AgentWall is a Windows desktop app — what it sees never leaves the PC it runs on.
Privacy story
The safest secret is the one that was never stored.
Most security tools protect data by encrypting it somewhere. AgentWall’s rule is stricter: a detected value is never written down at all — not in the preview, not in the ledger, not in a log.
- Runs entirely on your machine. Capture, OCR, and detection never touch a server.
- Values are never stored or shown. The ledger records that a card was found, and where — never the number.
- The record itself is tamper-evident. Hash-chaining means a quietly edited history shows up as a broken chain.
Who it’s for
For people who let AI do real work on real machines
Solopreneurs
You run the business from one PC — banking, taxes, client files, and now an AI assistant on the same screen. AgentWall keeps the assistant away from the crown jewels.
Developers
Your editor and terminal are full of API keys and credentials, and your coding agent reads both. AgentWall catches the keys before the agent’s context does.
Small teams
You want the productivity of computer-use agents without handing them an unfiltered view of payroll, customers, and accounts. Policy and an audit trail come first.
Roadmap
Where AgentWall is, and what’s coming
AgentWall is coming soon — it is not released yet. Phase 1 is built and in local testing; everything after it is planned work, labelled as such.
The desktop core: system tray and dashboard, local policy storage, screen capture with redacted preview, OCR detection, and the hash-chained audit ledger.
- Live capture & detection proven on a real Windows machine
- Detection hardening in progress — including a second-pass OCR read for difficult screens
AgentWall steps between agents and the machine in real time: a broker API and live connection, agent action proposals, and approval popups — approve or deny before an agent acts.
A complete computer-use loop running through the broker end to end, proving the capture → detect → redact → approve flow with a working agent.
A polished installer, hardening, and public release. Everyone who signs up before launch starts with the 90-day free trial.
FAQ
Straight answers
Is AgentWall available to download now?
No — AgentWall is coming soon and not released yet. Phase 1 is built and being tested locally on Windows. Sign up on this page and you’ll get an email at launch, with a 90-day free trial.
How does the 90-day free trial work?
Sign up before launch with your email. When AgentWall is released, your 90 days of free use start from the release — no card required to sign up here, and no charge for the trial period.
What platforms does AgentWall run on?
Windows only for version 1. AgentWall is a desktop app built specifically around the Windows screen-capture and OCR stack.
Does AgentWall send my screen or data to the cloud?
No. Capture, OCR, and detection all run locally on your PC. There is no AgentWall server receiving your screen — the design goal is that your data never leaves the machine.
What exactly does it detect?
Social Security numbers, payment card numbers (verified with the standard card checksum, so random digit strings don’t trigger it), API keys, and email addresses. Detections are recorded by type and screen location only.
If it finds a secret, is the secret saved anywhere?
No. Detected values are never stored and never shown — not in the preview, the audit ledger, or logs. The ledger records the event (what type, where on screen, when), which is what makes the history safe to keep and export.
How much will AgentWall cost after the trial?
Pricing hasn’t been announced yet, and it won’t be invented here. What is locked in: signing up before launch gets you the full 90-day free trial when the program is released.
Coming Soon
Sign up now. Get 90 days free when AgentWall launches.
One email at launch, your free trial ready, and nothing in between. Be first in line when the wall goes up.
The offer stands: sign up now and the first 90 days are free — we’ll email you at launch.