amd64
AgentWall 0.4.0-beta.1 Debian package for 64-bit Intel and AMD systems.
Install after downloading
sudo apt install ./agentwall_0.4.0-beta.1_amd64.deb
Minisign public key: RWQpDxCtUWCeUzwsHBDWUck9FihPyjwhpR91+e0eQDyGbI0BBDpQZzhQ

A safer way to run AI coding agents.
Running AI agents on a computer or server? AgentWall helps you catch risky supported actions before they can delete files, expose sensitive data, or disrupt work.
Ubuntu 24.04 (amd64) · macOS Apple Silicon · Windows 11 x64 · Public beta
AgentWall — Decision log
Liverm -rf ~/projects/data
git push --force origin main
waiting for your review…
npm run test
decisions stay on your machine
Public beta downloads
Download the published beta for Ubuntu, Apple Silicon macOS, or Windows 11 x64. Platform maturity and verification differ; review the notes before installing.
Public beta: what to know
Apple Silicon macOS has a published beta download. Its signed files are publicly verifiable, but it remains a prototype while live agent evidence is completed.
Windows 11 x64 has an intentionally unsigned public beta installer. Its SHA-256 manifest verifies the downloaded bytes, not the publisher identity, and installation does not activate AgentWall automatically.
Download
All three are published beta artifacts. Windows is an unsigned preview, and macOS and Windows integrations remain prototype-labeled while their evidence is incomplete.
AgentWall 0.4.0-beta.1 Debian package for 64-bit Intel and AMD systems.
Install after downloading
sudo apt install ./agentwall_0.4.0-beta.1_amd64.deb
Minisign public key: RWQpDxCtUWCeUzwsHBDWUck9FihPyjwhpR91+e0eQDyGbI0BBDpQZzhQ
AgentWall 0.4.0-beta.4 DMG for Apple Silicon Macs. The download is published and verifiable; it is not a supported whole-machine security product.
Before you install
Claude Code and Codex are still being tested. AgentWall may not see every action, and it does not protect activity outside its installed agent connections.
AgentWall 0.4.0-beta.6 current-user setup executable for 64-bit Windows 11. It is intentionally unsigned and is not a publisher-authenticated installer.
Before you run it
Compare the setup file with SHA256SUMS. The checksum detects changed bytes but does not prove publisher identity. Installation does not activate AgentWall, there is no automatic update, and Codex and Claude Code remain prototype integrations.
Current scope and evidence are published in the public capability matrix. AgentWall has no automatic update channel today.
Enterprise
AgentWall Enterprise is planned for teams that need simple, shared rules and a clearer view of how supported AI agents are used. It is not available yet.
Tell us about your fleet, agents, and requirements. We respond by email to discuss early access, availability, and enterprise pilots.
Contact UsOr email us directly at support@omnetsystems.com.
Set simple rules for the supported AI agents your team uses.
See which devices and supported agents are connected and need attention.
Review important approvals and blocked actions when your team needs answers.
Help IT set up supported devices and share the same rules across a team.
Let the right people manage team settings and review important activity.
Connect useful information to the security and compliance tools you already use.
Give teams room to move quickly while making the biggest risks easier to understand and control.
Privacy
Capability matrix
AgentWall only sees actions that a supported agent sends through its installed connection. The details below show the current limits.
| Integration | Label | OS | Evidence note |
|---|---|---|---|
Claude Code AgentWall can check selected Claude Code actions when its connection is installed and working. | Ask/Block · Prototype In testing: it can pause or stop some actions, but it is not ready to promise complete coverage. | Ubuntu 24.04 amd64 | Still being tested. Do not rely on it to catch every Claude Code action. |
Codex AgentWall can check selected Codex actions when its connection is installed and working. | Ask/Block · Prototype In testing: it can pause or stop some actions, but it is not ready to promise complete coverage. | Ubuntu 24.04 amd64 | Still being tested. Do not rely on it to catch every Codex action. |
Canonical artifact: public-capability-matrix.json. Claude Code remains ask-block-prototype until support-promotion gates are fully evidenced.
Limits
Common bypasses
AgentWall can pause a supported agent before it runs a risky command, changes files, or uses a selected tool.
See what AgentWall checked and what it allowed, so your team can understand what an agent was trying to do.
When AgentWall needs you, it explains the request clearly so you can approve it or stop it.
AgentWall tells you when its supported connections are not working properly, instead of pretending you are protected.
AgentWall beta
Download the free beta for Ubuntu, macOS, or Windows — or talk to us about your team.