Use the database on your own setup

Engineering teams of up to 25 developers using Claude Code, Codex, Gemini CLI, Copilot CLI or Cursor.

• You send your agent settings and how your team runs agents. We don't need your source code.
• Hardened settings for each agent you use, written in that agent's documented format.
• A list of the risky options in use: permission-bypass modes, auto-approved MCP servers, unsandboxed runs.
• A written report naming the documented incidents your current setup would not have stopped, and what does.
• Delivered within 5 business days of receiving the settings; questions answered by email for 30 days.

Security vendors and platforms that want the records inside a product without showing CC BY attribution.

• Most people don't need this: the data is free for commercial use under CC BY 4.0 with attribution.
• A written license that waives the attribution requirement.
• A dated weekly snapshot with severity factors, OWASP and MIT mappings and guardrail rules.
• An email the day a record scoring 7 or more is published.

Security, backup and recovery tools only. We don't accept money from the makers of any agent in the database.

• A labelled sponsor slot on the guardrails page or in the incident alert email.
• Sponsors get no say over records, scores, rankings or what we cover.