ReviewerShield — IDE-side egress guard for AI coding tools
Local outbound traffic monitoring and alerts for devs worried about AI tools leaking code
- Problem
- AI coding tools like Zhipu have recently been caught silently uploading local projects, but most developers don't run egress firewalls like Little Snitch, so large repo uploads can go unnoticed for a long time. Devs lack visibility into which tool sends code where and when, especially when juggling multiple AI assistants. Auditing this manually is nearly impossible.
- Solution
- A lightweight local network auditor focused on AI coding tools (Copilot, Codex, Claude Code, etc.). It logs every outbound connection's destination, timestamp, and upload volume, then alerts when an upload matches suspicious repo-sized payloads or hits non-whitelisted domains; generates readable per-project, per-process traffic reports.
- Users
- Individual devs using multiple AI coding assistants, security-conscious small engineering teams, and freelancers handling client-confidential code.
- MVP
- Monitor outbound connections for specified processes via local proxy or OS APIs; maintain a process and domain whitelist for common AI coding tools; trigger desktop notifications when uploads exceed thresholds or hit non-whitelisted domains; generate daily traffic summaries grouped by tool and project; keep all data local with no cloud account required.
- Revenue
- One-time purchase at $19-$29, or subscription at $3/mo with multi-device sync and custom rule cloud backup; team plan at $99/yr with centralized management.
- Why now
- AI coding tools are exploding while code-leak incidents are just starting to surface, waking developers up to the risk; enterprise firewalls are expensive and generic, with no lightweight local auditor tailored to AI coding workflows.