Product · Safety
Nothing sensitive happens without your approval.
The agent works for you, not on its own. Anything that spends money, sends a message, or changes something irreversible stops at an approval gate, and you can watch, pause, take over, or undo at any point.
The approval gate
The agent stops. You decide.
When a step would do something you cannot quietly undo, the run halts and surfaces exactly what it wants to do, in plain terms and with the real values. It moves only after you approve.
Always gated
Approve, deny, or edit the action before it runs. Deny and the agent replans around it.
And you can step in at any moment.
Live view
Watch every click and keystroke as the agent makes it, in real time.
Pause and take over
Freeze the run at any step, drive the browser yourself, then hand back.
Undo and revert
Roll back the agent's last actions and return to a previous state.
Pages cannot hijack the goal
The agent treats all page content as untrusted data, never as instruction. Text hidden in a page cannot redirect the task, and a page on one domain cannot influence work aimed at another.
Credentials stay on your machine
Passwords live in your OS keychain and are never sent to the cloud in plaintext. The cloud sees only that a login completed, never the values behind it.