Changelog

What's new

• Guardian now identifies the resource, credential and verb (read, write, delete) in MCP tool calls, so policy rules apply to them. Supported: Postgres, SQLite, filesystem, AWS, GitHub, Slack, Fetch, Firecrawl, Chrome DevTools, Playwright, Puppeteer and Claude in Chrome.
• guardian proxy status gives a fast view of the proxy's health in one command.
• Guardian Toolbar gets a Start Menu entry on Windows.

Bug fixes

• guardian hook install and guardian hook uninstall are removed — a hand-run install could race the daemon's own reconciler and break a working session, so hook installation now has exactly one source: the daemon.
• A credential dragged into a claude.ai chat is now scanned before it can reach Anthropic's servers.
• A Cursor check that can't finish now lets the command run, instead of blocking it.
• A machine could keep Guardian's proxy switched off locally even after the tenant turned it back on — fixed.

Bug fixes

• Tool calls seen by Guardian's proxy are now recorded exactly once, attributed to the session they belong to, instead of being duplicated or dropped.

What's new

• Introducing Guardian local proxy mode, analyze prompts and responses from browser.

Bug fixes

• A credential pasted into a chat is now caught when Guardian reads the conversation back from a saved transcript, not only when it arrives live.
• A credential guarded by a keyword is now caught even when it's pasted on the line after that keyword.
• guardian update --check no longer offers to downgrade a machine running ahead of the released version.
• Windows no longer leaves Guardian's proxy configuration behind after teardown.
• A live hook on one account no longer hides a missing hook on another account on the same machine.

What's new

• guardian doctor reports a fuller picture of the machine — identity, toolbar state, endpoint protection, and the update queue.

Bug fixes

• A cached policy now stays correctly tied to the organization it belongs to when a device moves to a new one.
• Removing a policy scope can no longer silently fail open.
• A server outage no longer looks like every device losing its credentials — Guardian tells the two apart, and a device backs off instead of retrying a failing server at full speed.
• Uninstalling Guardian from Windows Settings now removes it from every coding agent it was instrumenting.
• Windows hooks reach Claude Code again, and run correctly under both shells Windows can invoke them from.
• Windows terminals render Guardian's colored output as color, instead of showing raw escape codes.
• The toolbar no longer crashes on the MCP and agents screens.
• A machine installed before its organization's tenant existed can now ask for one, instead of being stuck unable to enroll.

Bug fixes

• A Windows update no longer drops the organization's trusted proxy or certificate.
• The toolbar and guardian agent list report protection accurately again.
• Uninstalling Guardian on Windows restores proxy settings even if stopping the daemon fails.
• A newly-seen coding agent is instrumented automatically, instead of being skipped until an administrator adds it.
• guardian doctor reports network and certificate problems more precisely, instead of pointing at the wrong cause.
• A credential Guardian couldn't verify now says so, instead of showing a blank dash

Bug fixes

• A new Claude Cowork session is protected from the moment it starts. Sessions are picked up as they appear, rather than on a timed sweep.
• On Windows, Guardian creates the folder it writes logs to, and uninstalling clears folders earlier versions left behind.
• Command analysis handles characters outside plain ASCII.
• Guardian no longer reports an agent as unprotected while it is enforcing.

Introducing Turbot Guardian, guardrails for vibe coding. Guardian gives security and central IT visibility and control over the AI coding agents running across your fleet.

With Guardian you can:

• Discover every agent and credential
• See what they can reach
• Watch what they do
• Control it with policy

Read the announcement and request early access.