Your agent runs shell commands. gate.cat blocks the catastrophic ones — before they run.

Deterministic, fail-closed. It vetoes rm -rf, disk wipes and secret exfil, and gets out of the way for everything safe.

Terminal demo: agent runs 'rm -rf ~/project', gate.cat vetoes it (DELETE_ANALYZER) before it runs; a benign 'rm build/tmp.log' is allowed.
pip install gate.cat

how it works & pricing → running agents across a team? →

Every line above is real gate.cat engine output. See the live catch log at gate.cat.