Rockfort Orion · live
Coding agents ask for permission all day. Nobody reads it.
Orion explains what each request actually does before anyone approves it. It also finds the AI tools your staff use, and stops client data before it leaves.
Deployed in a day. Nothing changes on anybody's laptop until you decide.
The box nobody reads
Coding agents ask permission dozens of times a day, and most of it is approved in under a second, unread. Orion reads it first.
- Explains every request in plain English.
mkdir buildbecomes "creates a folder called build in this project". - Rates each one with a traffic light, so people know when to stop and look.
- Blocks requests for escalated privileges automatically.
- Lists the skill files and instruction docs each agent follows, and flags any that change.
Most AI security tools stop at the browser. Orion watches the terminal too.
Works with
How it works
- Orion plugs into each agent's own hooks. Engineers keep the tools they already use.
- The explanation and the rating appear on the request they were about to approve.
- The checks run on the laptop. You set the rules: always allow, check first, or always block.
And the AI everyone else is using
Shadow AI, found
- Every AI tool with traffic, including the ones nobody expensed
- Personal accounts and shared logins, on company and personal devices
- What you are spending on seats nobody uses
Client data, stopped
- Customer records, documents, source code and credentials, blocked before they reach a public model
- Screenshots read as well as typed text, which text-only tools miss
- Policies by team, role or individual, so finance, legal and engineering each get the rules that fit
How it works
Live in a day. Quiet from then on
Deploy in a day
A browser extension or a network-level control, plus a hook in each coding agent. Your team keeps working the way it always has.
Agent requests, explained
Every permission request in plain English with a traffic light, and escalated privileges blocked automatically.
Sensitive data blocked
Customer records, documents, source code and credentials stopped in real time.
A clear picture
Every interaction logged, with reports built for auditors. You own the logs.
A retail analytics company found staff pasting customer data and screenshots into ChatGPT and Gemini
We brought it under control without changing how anyone worked. Orion runs inside their own cloud.
Questions we get
Which coding agents does it work with?
Claude, Claude Code in the terminal, Cursor and VS Code today. Codex is coming soon. Orion works through each agent's own hooks, so engineers keep the tools they already use.
What leaves an engineer's laptop?
The content stays on the laptop. The coding-agent checks run there, including the plain-English explanation and the rating. Rockfort receives metadata and telemetry only if you allow it.
Does it slow engineers down?
Orion adds a plain-English explanation and a rating to the request they were already about to approve. The rest of their workflow stays the same.
Can we set our own rules?
Yes. Decide which requests are always allowed, which need a second look, and which are always blocked. Requests for escalated privileges can be blocked automatically.
Is this employee surveillance?
We watch company and client data moving into AI tools. Reporting can run aggregated, with no individual named.
Does it break how people work?
It blocks data types rather than whole tools, so the work continues.
Can policies differ by team?
Yes. Policies can be set by team, role or individual, so finance, legal and engineering each get the rules that fit their work.
Where does the data sit?
Inside your environment. You own the logs and decide what, if anything, is sent to us. They can be deleted on request.
Does it work on personal devices?
Yes. The browser extension covers company and personal devices. The network-level option suits company-managed setups, and we will help you pick.
Which AI tools does Orion cover?
ChatGPT, Microsoft Copilot, Gemini, Claude, Perplexity and the smaller tools your team finds next month. If one is missing, tell us and we will add it.
Can we try Orion before we commit?
Yes. Orion starts with a free pilot, so you see what it finds across your own company before you pay for anything. We agree the scope on the call.
See what your agents and your people are actually doing.
Orion starts with a free pilot. A 20-minute call, then the review runs quietly for a few days. You get the agent picture, the tool list and the data findings.
Nothing changes on anybody's laptop until you decide.