Manage permissions without reading commands
Define file, network and execution permissions so AI follows your rules. Control its access without inspecting every command.
FinShield · Agent Security Shield
Desktop protection designed for AI agentsProtect your system, privacy and data
Let agents work efficiently, with secure control over your computer’s permissions.
FinShield Agent Security Shield uses FinSAFE sandbox technology to protect data privacy, system security and network access for mainstream AI agents. The free personal edition protects AI assistants on individual computers. The enterprise edition lets IT centrally configure and distribute security policies, govern agent permissions and execution on employee devices, and keep AI working within authorized boundaries.
Your AI assistant
Compatible with mainstream AI agents
Organize files · Use tools · Run commands
FinShieldAccess control · Execution isolation · Privacy protection
Your operating system
Control agent execution permissions
Work files · System environment · Private data
Keep using familiar AI assistants and launch protected tasks through FinShield
Enterprise-grade sandbox technologyWhy protection matters
Control AI permissions
Keep your computer secure
Traditional software relies on graphical interfaces: users click and type through relatively visible steps. Agents can also invoke terminals, run commands, modify or delete files, and write and execute code. Users without a technical background may find it difficult to assess what these actions do or how far they reach. Without effective controls, mistakes or unauthorized execution can disrupt systems, damage files or expose private data.
Based on your configured access permissionsFinShield enforces the rules during task execution
Keep work moving and important files protected
Allow access to working directories, make source documents read-only and restrict private folders containing passwords or browser data.
Alerts and records for unexpected actions
Out-of-scope actions are blocked according to policy. Sensitive content in configured inspection channels is handled by policy, with execution and alert records available for review.
Personal edition
Set agent-specific permissions
Protect your computer and data
Set file, network and execution rules, then launch your existing AI assistant through a protected entry point. Allow the working files it needs, restrict private data and review execution records.
Set agent-specific file permissions Protect personal information
Give each directory read-write, read-only or no-access permissions. AI can organize files in its workspace while source documents and private folders remain subject to their own rules.
- Working directories: allow everyday file operations
- Read-only directories: allow reading, restrict changes
- Private directories: restrict reading and writing
Enterprise edition
From protecting one computer
to managing protection across your company
After deploying FinShield, enterprise IT can centrally manage employee devices, configure and distribute security policies, and govern the permissions and execution of agents installed by employees.
Distribute security policies by device group
Set file, network and execution rules centrally. Endpoints verify policy signatures before applying them, keeping rules consistent across the organization.
Enforce enterprise security policies consistently
When enforced management is enabled, managed entry points reject personal policies that override enterprise rules, reducing configuration drift.
View device status and execution records centrally
Collect device registration, heartbeat and execution records, verify policy versions and identify unusual devices or tasks.
Revoke execution permissions remotely
Administrators can issue a revocation command. Endpoints reject new managed tasks, tightening the agent's execution scope.
How it works
Operating-system isolation
Constrain what agents can do
FinShield uses FinSAFE execution isolation to constrain agent processes, tools and resource access on real computers. Local permissions and sensitive-content rules are applied to specific operations.
Define the access scope
Specify read-write, read-only and blocked directories, and the networks the assistant may access.
Constrain execution
Use native operating-system isolation to limit protected processes and their child processes.
Handle exceptions by policy
Block unauthorized access and alert on or block sensitive content in configured inspection channels.
Record execution
Keep results and policy information for personal review and centralized enterprise audits.
Windows
Constrain execution with restricted tokens, AppContainer and related mechanisms, combined with network and process policies.
macOS
Restrict file access through the native system sandbox and manage network connections through a local proxy.
Linux
Use namespaces, system-call restrictions and resource limits to constrain file access and task execution.
Real-world tests of security controls
See real actions side by side
Understand how protection works
Tests with mainstream agents examine interaction, system and data security to evaluate the protection behind FinShield during agent execution.
Browse the complete security test libraryIsolate the window storm and keep the desktop undisturbed
Create 100 windows on Windows and compare the user desktop with and without private-desktop protection.
In the ordinary run, many windows overlap on the user desktop. With private-desktop protection, the windows are created in an isolated environment without disturbing the user desktop.
Unprotected runThe ordinary run places 100 windows on the user desktop, obstructing the view.
Protected runPrivate-desktop isolation keeps the window storm off the user desktop.
Feature comparison
In Windows environments
Capabilities and agent integration
| Products | Runtime | Agent integration | Risky System Operations | File Permissions | PII detection | Data retention |
|---|---|---|---|---|---|---|
| FinShield | Native Windows | Supported | Supported | Supported | Supported | Supported |
| SRT (Anthropic) | Native Windows | CLI Agents only | Partially supported | Supported | Unsupported | Unsupported |
| Codex (OpenAI) | Native Windows | DSH task execution failed | Partially supported | Partially supported | Unsupported | Unsupported |
| MXC (Microsoft) | Windows execution backend | DSH failed to start | — | — | — | — |
| Docker Sandboxes | Linux microVM | Windows Agents unsupported | Isolates the host system | Supported | Unsupported | Unsupported |
| OpenShell | WSL2 + Linux container | Windows Agents unsupported | Isolates the host system | Supported | Unsupported | Unsupported |
Download the free personal edition
Free for individuals and small teams
Licensing for larger enterprises
The personal edition manages permissions on a single computer; the enterprise edition centrally manages employee devices.
Personal edition
Protect your AI workspace
FreePersonal use
- Local agent execution protection
- File, network and task execution policies
- Local execution results and records
Enterprise edition
Central management for enterprise administrators
Free for small teamsLicensing for larger enterprises
- Manage agents across company computers
- Distribute security policies and updates centrally
- Collect device status, execution records and alerts
Downloads and hands-on guides
Start on your own computer
Choose how you want to use it
- 01
Download and install
Download the matching personal tools and follow the installation guide.
- 02
Configure access permissions
Configure which directories, networks and tools the agent can access.
- 03
Launch your agent
Launch your AI assistant through FinShield and continue your daily tasks.
- 04
Review execution records
Review task results, blocked access and alerts.
Choose your operating system
The download is a tar.zst archive. Follow the installation guide to configure it.View installation instructions
Visual sandbox
Compare execution with and without protection on your computer, including file, network and task-timeout scenarios.
Enterprise management
Distribute policies, manage employee devices and review audits centrally. Enterprise management requires activation; a free plan is available for small teams.
GitHub and documentation
Browse releases, agent integration examples and usage documentation.
YOUR NEXT STEP
Explore FinShield
Product demos and integration guidance
Tell us about your business needs, existing systems and deployment environment. Our team can provide a product demo and discuss integration.
Frequently asked questions
Learn more
FinShield
How are FinShield and FinSAFE related?
FinShield uses FinSAFE security technology to provide desktop protection for personal computers and employee devices. FinSAFE is the shared execution security foundation and also covers servers, virtual machines and enterprise endpoints.
Can I use it without understanding commands or code?
Configure file, network and execution permissions using the installation and integration documentation, then launch agent tasks through the protected entry point.
Which AI assistants can it protect?
GitHub provides integration templates for Hermes, OpenCode, Codex and agy. The visual sandbox can also detect local Hermes and FinClaw installations. WorkBuddy desktop workflows are covered in the accompanying materials. Choose a configuration for your assistant, platform and release, and launch tasks through the protected entry point.
How should I choose between the personal and enterprise editions?
The personal edition manages permissions on one computer. The enterprise edition distributes policies, manages devices and collects audit records centrally. Individuals and small teams use it free; larger enterprises use an appropriate license.
How does sensitive-content inspection differ from network blocking?
Directory permissions govern file access, network policies govern destinations, and content detection checks sensitive information in interaction channels for alerts, approvals or blocking according to enterprise policies.