ichi

The new ZeroLeaks site is live. Landing + marketing pages are now updated. Huge thanks to @kargulstudio for the work on this. Dashboard is next, and it’s coming very soon. zeroleaks.ai

I've forked Claude Code's leaked source code and made it better. Works with ALL models, OpenRouter AND your ChatGPT sub. The name is Better-Clawd. Open Source and available right now: bun i better-clawd

Today I'm launching ZeroLeaks, the first security platform built specifically for AI agents. It helps teams find prompt injection and tool misuse before those issues hit production. Try it now at zeroleaks.ai

I’m making a pricing change at ZeroLeaks: I’m retiring the public free plan and moving new users to a 14-day Starter trial. I wanted to share the reasoning directly. The free plan made sense early on. It lowered friction while I was opening up the product and helped more people discover ZeroLeaks. But over time, I learned something important: the best way to understand ZeroLeaks is to use the real product. A limited free tier often didn’t give users enough room to experience the core value: running meaningful scans, getting detailed reports, and seeing how the platform fits into a real security workflow. So instead of pushing people into a lightweight forever-free experience, new users will now start with a 14-day Starter trial. I think that creates a better evaluation experience and a clearer path to value. For existing free users, I’m handling this carefully: - your access continues through June 15, 2026 - after that, your account moves to read-only - your data and past reports remain accessible - nothing gets deleted - you can upgrade anytime if you want to keep scanning I wanted this change to feel fair, transparent, and non-disruptive. From my perspective, this also helps me invest more into what matters most: better testing coverage, better reporting, faster product improvements, and a better overall experience for teams securing AI systems. I’m building ZeroLeaks for a future where AI security is taken seriously from day one. This change is part of that. If you’ve been using ZeroLeaks already: thank you for being early. If you’re new here: I think this will make the product much easier to evaluate the right way.

ZeroLeaks is now live on Product Hunt! Give it an upvote: producthunt.com/products/zer…

I’ve just ran @OpenClaw through ZeroLeaks security scan. This time using Claude Opus 4.6 (the recommended model). Results: - Security score: 4/100 - Prompt injection success rate: 22.6% (14/62) Two probes achieved full compliance, including protocol mcp shadow, which triggered a real HTTP request tool call. That number might look small. But a 22.6% injection success rate is huge when the agent can execute tools. We shouldn’t stop until that number is 0%. Full analysis: zeroleaks.ai/reports/opencla…

ZeroLeaks Ship Week - Day 1: AgentGuard Your AI agent has an API. We attack it. AgentGuard is a new way to test deployed AI agents for security vulnerabilities. Instead of scanning a static prompt in a sandbox, we send real adversarial requests directly to your live endpoint, the same infrastructure your users hit. Most security testing happens in isolation. You test a prompt, get a score, move on. But agents in production behave differently. They have tools, memory, multi-turn context, and real exploits behind them. That's where the actual risk is. AgentGuard connects to any agent with an HTTP endpoint. You give us the URL, pick your API format (OpenAI, Anthropic, AI SDK...), and we run a full red-team engagement against it. Two phases: first we hit it with our adaptive attack engine, then we run agent-specific probes designed for tool hijacking, authority exploitation, multi-turn grooming, and data leakage. This is still in beta. I'm shipping it early because I want real feedback from people testing real agents. If something breaks or feels off, DM me, I'm always fixing things. Try it now: zeroleaks.ai/dashboard/agent… Day 2 tomorrow.

Massive update to ZeroLeaks: the first AI red-teaming platform that doesn't just find prompt vulnerabilities, it fixes them automatically. Introducing Auto Prompt Hardening. Here's what it does: 1. You run a security scan on your system prompt 2. ZeroLeaks attacks it with 250+ adversarial techniques 3. If vulnerabilities are found, it generates hardened prompt additions, ready to deploy How it works: Our multi-agent system (Strategist → Attacker → Evaluator → Mutator) identifies exactly which attack vectors succeeded against your prompt. Then a dedicated security engineer agent rewrites the vulnerable sections while preserving your product's original behavior. You get: - The exact lines to add - Where to add them (line number + context) - Zero guesswork Two ways to use it: → Dashboard: See additions inline with insertion anchors. Copy and paste directly into your system prompt. → GitHub PR: Get committable suggestion comments on your system prompt file. One click to apply the fix. No context switching. This is the missing piece in LLM security. Every tool tells you what's wrong. None of them tell you exactly how to fix it, until now. zeroleaks.ai

Big update for @ZeroLeaks: I've just made it easier to try, cheaper to run, and simpler to pay for. Free trial is now live: Starter comes with 14 days free + 25 scans/month once you’re on it. We also kept a free tier with 3 scans/month so anyone can test it out without paying. On top of that, we reduced pricing across the board: $49 → $39 / month $499 → $399 / month And for payments: we now accept USDC (stablecoin) as well. If you’ve been on the fence, now’s the best time to try it and tell me what you want added next.