🚀 Launch offer: 50% off for the first 50 buyers: 49 left. Applied automatically at checkout.
Native app for Mac · 100% local
Know what your AI tools are doing.
See permissions, network activity, sensitive file access and which agents run without asking, in one dashboard. Your monitoring data stays on your Mac.
Windows version in development · No credit card · No account for monitoring
macOS 14 or later · Apple silicon and Intel
SecAIQ Watch
4 AI tools running6 connections · all local
High
Agent runs without asking--dangerously-skip-permissions
App screens with sample data. Cards show illustrative activity.
Visibility
Which AI tools are running, what they can access and where they connect.
Privacy
No cloud analysis, no account for monitoring, no prompts or file contents collected.
Read-only monitoring
The monitoring engine never blocks, intercepts or changes anything. It only observes.
The blind spot
Your AI tools do a lot you never see
AI assistants and coding agents are powerful because they act on your computer: they read files, run commands and talk to the network with your account's rights. Most of that activity is invisible.
They can read your files
Coding agents and desktop assistants can open project files, keys and configuration.
They can run commands
Shell access, hooks and MCP servers act with your user account's rights.
They talk to the network
Prompts and context travel to providers and to hosts you may never have heard of.
And it is scattered
Settings live in a dozen places. There is no single view of what is allowed and what really happens.
Findings
Plain language, with the evidence
Every finding says what happened, shows where it was seen and explains why it matters. Secrets are located, never copied. These are illustrative examples; what you see depends on your own computer.
Findings · illustrative
HighAn agent runs without asking for permission
--dangerously-skip-permissions · started in ~/projects/shop
The tool can run commands and edit files without stopping to ask you first.
HighA key-like value sits in a config file
.cursor/mcp.json · line 12 (value not shown)
Watch shows where it is, never the secret itself, so you can move it out.
MediumA new MCP server appeared
filesystem-extra · added since your last scan
MCP servers act with your account's rights. A new one is worth a look.
MediumA tool approves actions automatically
defaultApprovalMode · set to auto-approve
Settings show how freely each tool is configured to act on its own.
MediumAn editor extension registers an MCP server
VS Code · extension declares an MCP server
Extensions can bring their own tools. See what each one says it can do.
InfoAn AI tool connected to a new destination
api.example-llm.com · first seen today
Know where your tools connect, and get a quiet alert when something new shows up.
What it reveals
Nine views of one picture
From "what is running?" to "what should I fix?", on your Mac.
Core
Understand AI Permissions
Tell observed access from granted, inherited and theoretical permissions, and see every change since your first scan.
Core
Follow Network Activity
Connections, destinations and data-transfer volumes attributed to each AI tool, with a process tree of what talked to whom. Export any session as an incident report.
Core
Find Risks. Track Fixes.
Plain-language findings with evidence and a history of what you resolved. Optional fixes are separate from monitoring and only run when you click.
Core
Spot Risky Start-up Flags
Notices when an agent runs with --dangerously-skip-permissions, --yolo or similar flags, and shows in one Approvals view how freely each tool can act on its own.
See Every AI Tool
Discover running and installed AI tools, CLI agents, desktop apps and MCP servers. About 37 tool families are recognised.
Spot Sensitive File Access
See detected access to keys, credentials and other sensitive areas, with the limits of the method stated openly.
Understand AI Usage
Tokens, estimated cost, models, projects and tool-call activity for Claude Code and Codex. Counters only.
See IDE Extensions
Lists AI extensions in VS Code, Cursor, Windsurf and similar IDEs with what they declare they can do, including extensions that register MCP servers.
Alerts You Control
Notifications for new MCP servers, AI extensions and destinations, quiet hours, upload and cost limits and an optional weekly summary. Critical alerts always get through.
See it in action
A short tour, then the real screens
The tour is recorded on a Mac; the screens below are from the macOS app. All sample data.
Your AI security posture at a glance · sample data
Who can access what? · sample data
Which tools act without asking? · sample data
AI traffic and destinations · sample data
Evidence, risk and fixes · sample data
At home on your desktop
Always there. Never in the way.
It keeps watching in the background. Glance at your grade, running tools and findings, and open the full dashboard only when you want it.
macOS · menu bar
A glance from the menu bar
Your grade, what is running and what changed, one click away. The Mac app is signed and notarized by Apple.
Light or dark, it follows your system
The same dashboard in macOS, in your system's appearance. No account, no cloud analysis, no prompts or file contents uploaded.
Privacy by design
Your monitoring data stays on your computer
Nothing the app finds on your Mac or PC is sent to us or to anyone else. Its only connections are to secaiq.com, to check your license and look for updates, and they carry no scan data. See exactly what.
Mac app signed and notarized by Apple
Read-only
Scan data never leaves your computer
30-day money-back
No cloud required
Monitoring and analysis run on your computer.
No prompt collection
Prompts, responses and file contents are not recorded.
Read-only monitoring
It never blocks, modifies or slows your AI tools.
No account required
Use the monitoring app without signing up for anything.
Monitoring
Always read-only
Observes processes, connections, byte counts, file paths and settings
Never blocks, intercepts, slows or modifies your AI tools
Works fully without ever using a fix
Optional fixes
Separate, and only when you click
Never automatic; you can ignore them completely
Show the exact change and ask you to confirm
Back the file up first; every change can be undone
Technical transparency: what it does not seeWe would rather tell you than let you assume. 7 honest limits.
File access is sampled
Very short-lived accesses can be missed. A file seen open does not prove its content was read or sent.
Network is attributed by process
Volumes come from the operating system's counters (macOS, or the Windows kernel network trace) and are matched to a tool through its process tree; unusual process layouts can be attributed imperfectly.
Short-lived processes
A process that starts and ends between two samples (about three seconds) is not seen.
Full Disk Access is optional (macOS)
The complete permission scan needs it (granted once). Without it the app shows fewer details and tells you so.
Hashes show change, not safety
An MCP file hash proves a file changed, not that it is safe. Remote MCP servers and downloaded dependencies are not verified.
Fixes only when you click
Optional one-click fixes (such as Claude Code deny rules) change your AI tool's settings only after you confirm; the file is backed up first and the change can be undone.
Approval modes come from settings
A setting shows what a tool is configured to do, not proof of how it behaves. Cursor's own auto-run setting is not stored in a file the app can read, so it is not shown. Start-up flags are seen only while the process is running.
One app instead of four
The whole picture in one place
Most tools do one of these jobs. SecAIQ Watch puts them in one native app for Mac, so you do not have to assemble the picture yourself.
Usage and quota trackers
Session and approval notifiers
MCP scanners
Network monitors
SecAIQ Watch
Usage
Plan quota and reset countdown
✓
◐
—
—
—
Cost and token usage
✓
—
—
—
✓
Sessions
See running agent sessions
—
✓
—
—
✓
Session timeline and incident report
—
—
—
—
✓
Permissions and risk
Detect auto-approve settings
—
—
—
—
✓
Risky start-up flags (--yolo …)
—
—
—
—
✓
MCP server inventory and config scan
—
—
✓
—
✓
Secret scan in config files
—
—
◐
—
✓
IDE extension inventory
—
—
—
—
✓
Network and how it runs
Network destinations and new-connection alerts
—
—
—
✓
✓
Blocking / firewall
—
—
—
✓
— by design
Read-only, no account, no cloud
◐
◐
◐
◐
✓
✓ yes · ◐ partly or varies by tool · — not offered. Other tools are summarised by category from their public descriptions (October 2026); individual products differ. We do not offer plan-quota tracking, and MCP scanners can analyse tool descriptions more deeply than we do. SecAIQ Watch never blocks anything, by design.
Open source
Start free with the open-source engine
The monitoring engine is public under the MIT license: run it, read it, audit it. The native app is the same idea, built for daily use. Its license funds both.
One license covers one Mac now, and one Windows PC when the Windows version ships.
Pricing
One license. Everything included.
Try SecAIQ Watch free for 14 days, no card and no account. When you are ready, one annual license covers every feature on one Mac, and one Windows PC when that version ships.
1
Download and try it free
Install the app and watch your AI tools for 14 days.
2
Buy a license
Secure checkout by Dodo Payments. Your license key is emailed right after payment.
3
Activate in the app
Paste the key in Settings → License. It takes a few seconds.
All monitoring features, nothing locked
Updates while your subscription is active
One Mac now, one Windows PC when it ships. Move either any time
Cancel renewal any time
30-day money-back on your first purchase
Dodo Payments is our Merchant of Record: taxes are added at checkout where they apply and Dodo Payments sends your receipt.
Annual licenses renew each year until cancelled. By buying you agree to our terms, refund policy (30 days) and the terms shown at checkout by Dodo Payments. See the privacy policy.
Questions? contact@secaiq.com
FAQ
Questions, answered
01Does SecAIQ Watch send my data to the cloud?
No. Monitoring and analysis run on your Mac or PC. The app contacts secaiq.com only to activate, renew or check your license, sending the license key and a one-way hash of the computer's hardware ID, never scan data. If you allow update checks, it also asks secaiq.com for the newest version and sends only the app and operating-system version.
02Can it block or change anything?
Monitoring is read-only: it never blocks traffic or interferes with your tools. The only exception is optional one-click fixes you choose to apply (such as adding deny rules to Claude Code settings); each is confirmed, backed up and undoable.
03Which AI tools does it support?
About 37 tool families, including Claude Desktop and Claude Code, ChatGPT and Codex, Cursor, Windsurf, GitHub Copilot, Gemini, Ollama, LM Studio, Aider, OpenCode, Zed, Kiro, Warp and MCP servers.
04Does it run on Windows?
Not yet. SecAIQ Watch is available for macOS 14 or later (Apple silicon and Intel). The Windows version is in development and will be added to the same license when it is released.
05What permissions does the macOS app need?
None to start. For the complete system-permission view macOS asks you to allow Full Disk Access once. You can decline and still use the app with fewer details.
06What happens after the 14-day trial?
The trial gives full access for 14 days with no card and no account. After that the app locks until you activate a license; your collected data stays on your computer.
More questions
07Does it read my AI conversations or file contents?
No. It observes metadata: processes, connections, byte counts, file paths and settings. Prompts, responses and file contents are not read or stored. Usage figures come from token counters in local logs.
08Does it work offline?
Yes. Monitoring and your dashboard work without internet. Buying, the first activation and license renewal need a connection; an activated license is checked offline.
09Does the annual license renew automatically?
Yes. Annual is $19.99 per year and renews each year through Dodo Payments until you cancel; you can cancel renewal at any time and keep access until the paid year ends.
10How is it different from the free open-source version?
The open-source SecAIQ Watch (MIT) runs as a local PHP web panel you start from a terminal, on macOS, Linux and Windows. The native app (macOS; Windows is in development) has a menu-bar or tray item, no PHP or terminal setup, start at login and built-in updates; the Mac app is signed and notarized by Apple. It adds permission-drift history, MCP file-integrity checks, risky start-up flag detection, approval-mode checks for more tools, an IDE extension inventory, richer alerts and incident report export. Both are local and read-only.
11Does it update itself?
It can. SecAIQ Watch asks secaiq.com once a day whether a newer version exists (you are asked once whether to allow this) and installs an update only after you confirm and only if it is genuine: SecAIQ-signed. It sends the app and operating-system version, nothing else.
12How do I cancel or update my card?
In the app: Settings → License → Manage subscription opens your Dodo Payments page where you can cancel renewal, update your card and download invoices. Cancelling stops the renewal; the license stays active until the end of the period you paid for.
13What about refunds?
You can get a full refund within 30 days of your first purchase, and within 14 days of a renewal. Write to contact@secaiq.com with the email you used to order. Details are in the <a href="/watch-refund">refund policy</a>.
