For IT and security leads

Let agents near real systems,
on terms you can enforce.

NeuralVault runs on your machines. Commands and changes wait for your approval, a guard with fixed rules checks each action before it runs, and web requests are held to an allowlist.

An illustration of the guard. The scores are measured, as of 7 October 2026, and the rest is drawn for the page.

Why it fits you

You are being asked to let an agent near real systems, and you need to say what it may touch.

  1. 01

    You decide what it may touch

    Manual mode asks about every step, deletions are always refused, and the Safety screen shows security events and the audit log.

  2. 02

    It is checked before it runs

    A guard looks at each action first, and refuses or asks for leaked keys, look-alike installs, piped downloads, known code flaws and hidden instructions.

  3. 03

    Requests stay on a leash

    A web fetch is checked against an allowlist, again on every redirect, and addresses on your own private network are blocked.

The difference it makes

Before, and with NeuralVault.

Without it

  • Everything allowed unless somebody thought to block it
  • A vendor’s word that it is safe
  • Open access to the web from an agent

With NeuralVault

  • Every command and change waits for your approval
  • A guard on every action, with published scores and misses
  • Web requests held to an allowlist
  1. 1

    Choose the mode

    In Manual mode every step asks first.

  2. 2

    The guard checks first

    Each action is checked before it runs, and a doubtful one asks.

  3. 3

    Read the scores

    The measured results are published, misses included.

What it does for you

The controls a security review
asks for first.

Nothing runs without your say-so

In Manual mode every step asks first, and Read-only changes nothing. The audit log records what ran and whether it was allowed.

A guard that asks before the damage

It stops an install one letter off a well-known package, a secret about to be written into a served file, and code with a known flaw.

See what it catches, with the scores

Instructions hidden in what it reads

When an agent has read text from outside, a send or a risky write waits for you, so a poisoned page cannot steer it quietly.

Your own server, your own model

Route models to a server you own, several at once: a DGX Spark, a home server, vLLM, LM Studio or a rented box.

Files your own tools can inspect

Notes and memory are plain Markdown and the audit log is a plain text file, all on your disk, so your existing monitoring can read them.

A signed installer

The installer and the app are code-signed under our company name, so Windows shows who published them.

What is not ready

NeuralVault is Windows only: macOS and Linux builds are not part of 2.0. A new signing certificate can still meet a reputation prompt for a while. Shared organisations and seats follow with Business. Business testing opens in December 2026, and launch is planned for the first quarter of 2027, with January the goal. The guard’s results come from our own testing, not an outside audit, and the scoreboard shows every test set with its date.

Release updates

Get an email when NeuralVault ships for it and security

One email when a NeuralVault version goes out. We note which page you signed up from, so we know who to write for.

Almost there. Check your inbox and click the link to confirm, and you are on.

Double opt-in, and one click to stop. Only the NeuralVault release list.