NoFly draws the lines your agents don’t cross.
A no-fly zone doesn’t ground the sky. Traffic keeps moving; it just never crosses the lines that matter. We draw and enforce those lines for the AI agents companies now let loose on their systems.
Four promises, and what each one costs us.
- 01No phoning homeIn force
The laptop tier never phones home. The CLI, the gate inside each coding agent and the machine scan run with no account, no key and no telemetry. Pull the network cable and they still work.
What it costs us: We cannot see how the free tier is used, so we cannot sell anyone that data either.
- 02No meteringIn force
Machines are never metered. No price per laptop, per endpoint or per agent, on any plan. A firewall that costs more the further it spreads never gets spread.
What it costs us: It gives up the easiest revenue lever this category has.
- 03Open source on laptopsIn force
What runs on your laptop is open source. The CLI and the hooks are Apache-2.0 with zero dependencies, so your team can read exactly what sits in the path of every command.
What it costs us: Anyone can study how the gate works, including people trying to get past it.
- 04Untested is not safeIn force
Untested never reads as safe. A control nobody has attacked is shown as untested, not as a pass. A fresh account never starts with a green score.
What it costs us: Our dashboards look worse on day one than tools that count silence as success.
Trust center
Security questionnaire. Sub-processors, data handling and our SOC 2 status, answered before you ask.
shomra-org/agent
Read the code. The CLI and hooks that run on your laptops, in the open.
Book a call
Talk to a person. A short call with someone who has read your architecture. If we are the wrong fit, we will say so.
Tell us what your agents can reach.
We will map it with you on a call, and show you which of those actions NoFly would clear, hold or refuse.
Book a call