Show HN: Secure your AI agents on Mac
来源:Hacker News AI收录:2026/10/22
✦ AI 解读
Plango 是一款 Mac 原生安全套件,专为运行 AI 编码工具的用户设计。它通过本地安全模型评估威胁,围绕数据访问、通信和暴露的“致命三要素”进行防护。功能包括:按数据类型或 Finder 标签限制 Agent 访问、设备端安全模型(可切换或自带密钥)、审查 Mac 隐私与权限、自动将环境密钥移入钥匙串、网络阻止/允许列表、检查技能与插件行为、自定义规则及完整日志记录。
Plango is a Mac native security suite for anyone running AI coding tools. It works by running a custom local security model that evaluates threats against the lethal trifecta (data access, communication, exposure).Some cool features:
- Restrict Agent access by type of data (ssh keys, env files) or finder tags (finally a good reason to use the color tags in finder).
- On device security model, but can switch to another local agent or bring your own key.
- Review your Mac's privacy and access, apps, startup & extensions.
- Automatically move env secrets into keychain.
- Network blocks/allow lists, see what apps and agents are accessing. Stop them from data exfil.
- Check skills and plugins for bad behavior.
- Create custom rules for all of these things.
- Log every action, request, block etc in an easy dashboard.
- Vuln scan of all projects on your Mac.About us:
I'm Fred, long term hacker first time shower. My co-founder Rich and I care about privacy, security and believe that AI software development is the future. We have two decades of combined experience in cyber, NLP and AI and are working on this tool full time. Given how fast cyber is evolving we're pushing changes to this on a daily basis.Please download and trial for free! We're here to answer any questions about the app or cyber/AI.
Comments URL: https://news.ycombinator.com/item?id=50200396
Points: 2
# Comments: 2
相关推荐
Can we replace a $150k Looker with a bucket of HTML files?
✦ AI 摘要文章探讨用静态 HTML 文件替代昂贵的 Looker 等商业 BI 工具的可能性,作者认为现代数据栈下,通过简单脚本生成静态报表即可满足多数需求,成本极低且维护简单。内容引发 HN 讨论,涉及 BI 工具演进与自建方案权衡。
I Built an AI Bot to Fact-Check the Midterms. Here's What I've Learned
✦ AI 摘要作者分享为美国中期选举开发AI事实核查机器人的经验,涵盖技术实现、数据源选择、准确性挑战及政治语境下的偏见处理。文章来自Substack个人博客,在Hacker News仅获2分且无评论,但为AI从业者提供了选举场景下事实核查工具开发的实践参考。
Show HN: Kavela – AI Automations that do not fail silently
✦ AI 摘要Kavela 推出封闭测试版,定位为可扩展、可观测的 AI Agent 自动化平台,旨在解决 AI 工作流静默失败问题。目前已有 216 名测试用户。平台支持将提示词转化为可重复执行的工作流,提供可观测性、任务管理和连接器,Agent 可长期运行并保持持久文件上下文,每次运行在隔离环境中执行任务,适合将 Claude/Codex CLI 中的手动流程产品化。