Know exactly what your AI installs.
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default and only lets through what it can verify.
Why now
The npm you trusted yesterday isn't the npm you install today
Recent supply-chain attacks that signature-and-advisory tools were slow to catch.
Shai-Hulud worm
Self-propagating npm malware that steals tokens and republishes itself.
Shai-Hulud 2.0
1,190+ packages compromised in a single coordinated wave.
TanStack attestation abuse
Valid SLSA attestations attached to malicious releases.
Phantom Gyp
Malware delivered through binding.gyp, not lifecycle scripts.
The platform
Protection at the moment code enters your project
One local gate, backed by the cloud, standing between every install and your disk.
Deny by default
Block malware before it installs
Every package is checked against live malicious-package feeds and a battery of static and behavioral rules. Bad packages never reach disk.
- ✓Typosquat and lookalike detection
- ✓Malicious install-script and obfuscation analysis
- ✓A verified alternative when something is rejected
AI guardrails
Put a gate in front of every AI agent
ShadowCanopy detects Cursor, Claude Code, Codex, Gemini, and Windsurf and pins them to install only through the gate — and scans the skills and instruction files those agents trust, so malware can't hide in SKILL.md or hooks.
- ✓MCP server returns a verdict before install
- ✓Shell hook blocks raw npm, pip, and cargo
- ✓Skills & agent-context scan for TrapDoor-class attacks
Provable trust
Verify the bytes, not just the name
Approved npm and crates downloads carry a hash the agent recomputes at the proxy. Any mismatch, whether a tampered mirror, cache poisoning, or MITM, is refused.
- ✓Per-artifact integrity verification
- ✓Version-pinned allow-list
- ✓Signed agent installers
How it works
Live in about a minute
Install-time protection, not an after-the-fact audit.
Install the agent
One native binary (no Node.js required) gates npm, pnpm, pip, cargo, go, gem, and more before any artifact touches disk.
Verify in the cloud
Known-malicious intel, static rules, sandbox behavior, and AI analysis decide every unknown package.
Ship safely
Only approved packages install, and your AI agents are pinned to build through the gate.
Comparison
Why teams move beyond npm audit
| Capability | npm audit | ShadowCanopy |
|---|---|---|
| Default policy | Allow all | Deny all |
| Ecosystems covered | npm only | npm, PyPI, crates, Go +more |
| Known-malicious intel | Advisory lag | Live malicious-package feeds |
| Zero-day malware | Misses | AI + behavioral scan |
| Artifact hash verification | No | Strict (npm · crates) |
| Blocks before install | No | Yes |
| AI agent guardrails | None | Hooks, rules + skills scan |
| Cross-platform agent | No | Mac · Win · Linux |
Coverage
Everything the security review asks for
8 package ecosystems
npm, PyPI, crates.io, Go, RubyGems, NuGet, Maven, Packagist.
CVE & license scanning
Flag known vulnerabilities and license violations against policy.
SBOM export
CycloneDX and SPDX for every project and scan.
AI skills scanning
Detect malicious SKILL.md, hooks, and instruction files before agents follow them.
SSO & RBAC
Enterprise SSO with domain routing and role-based access.
Audit logs
Every verdict and action recorded, with IP capture.
Our approach
“Every dependency is untrusted until it’s verified. That’s the only model that holds up when AI is writing the code.”
Security & compliance
Built to pass the security review
Signed installers, HttpOnly session cookies, audit logging, and enterprise SSO.
Type II (in progress)
Data export & retention
Roadmap
OIDC + domain routing
FAQ
Frequently asked questions
Will this slow down my installs?
What about false positives?
Does it work offline and in CI?
What do you do with my code and data?
Do you cover malicious AI skills?
How long does setup take?
Ship with AI, without shipping malware
Start free with 30 days of unlimited scans.
Installs in about 60 seconds. No credit card required.