# Rollcage

> Rollcage is a macOS menu-bar app that protects developers' projects from AI coding agents (Claude Code, OpenAI Codex CLI, Cursor, Gemini CLI, Aider, OpenCode, Goose, Amp). It takes instant copy-on-write snapshots when an agent starts, restores files an agent deleted or changed, warns about mass deletions, and blocks agents from reading secrets or running destructive commands.

- Platform: macOS 14 Sonoma or later, Apple silicon and Intel. Signed with an Apple Developer ID and notarized by Apple.
- Price: $39 one-time payment, 7-day free trial with every feature. One licence key works on up to 3 Macs. No subscription, no account. All sales are final (no refunds); the trial is for trying first.
- Privacy: everything runs locally. Snapshots never leave the Mac. The only network calls are the licence check and update downloads.

## Features

- Instant snapshots: APFS clones of protected folders whenever an agent starts, plus every 15 minutes while it runs (configurable) and an optional fixed schedule. Clones take almost no disk space until files change.
- Auto-protect: if an agent starts inside a git repository that isn't protected yet, Rollcage adds it.
- Restore: see deleted, modified and new files per snapshot; restore selected files or roll a folder back. Current versions are moved aside, never deleted.
- Mass-delete alarm: a notification when many files disappear in a short burst (default 100 files in 10 seconds) or a protected folder vanishes.
- Secrets Guard: hooks into Claude Code, Codex, Cursor and Gemini CLI and blocks reading .env files and other secret files (keys, certificates, credentials, Rails master.key, Terraform state, ~/.ssh, ~/.aws…), commands that print environment variables (env, printenv, echo $API_KEY), and inline code that reads environment variables in any language (python -c, node -e, ruby -e, php -r…).
- Command Guard: blocks or asks before destructive commands such as rm -rf ~, git reset --hard, git clean -f, force pushes, DROP DATABASE, curl | sh, sudo and terraform destroy.
- Activity timeline of agent sessions, snapshots, restores and blocked actions.

## Links

- [Home](http://localhost:3000/)
- [Download](http://localhost:3000/download)
- [Buy](http://localhost:3000/buy)
- [Privacy policy](http://localhost:3000/privacy)
- [Terms](http://localhost:3000/terms)
- Support: support@rollcage.app