Case studies · Technology (SaaS)

A software company lets its engineers use coding agents with secrets kept out

Coding agents allowed across engineering, with cloud keys, tokens and private keys blocked before a prompt reaches a model, and each decision recorded.

TowerCoding agentsEditors and agents writing code
Claude Code payments-api · Platform team0.0s
  1. Read the failing testread_file
  2. Propose a fix for the retrychat
  3. Send the .env file to the modelchat
Rule SECRETS-01 · record #4,813
Illustrative product view. Sample data, not client data.

The problem

Engineers want coding agents. Security has seen API keys and customer data pasted into prompts and wants a control that works in the tools developers already use.

  • Defaultsecret blocking in agent prompts
  • 5coding tools covered or in beta
  • Eachblocked prompt on the record, with the reason

Before Raidu

  • Coding agents banned or used on personal accounts
  • Keys pasted into prompts
  • No record of what agents sent

With Raidu

  • Approved coding agents for each team
  • Secrets stopped before the model
  • The agent told why, and the decision recorded

The challenge

The team’s engineers were already using coding agents, some on personal accounts. Security had seen keys pasted into prompts and wanted control without slowing anyone down.

How they set it up

Coding agents send their model calls through Raidu. Cloud keys, tokens and private keys found in a prompt are blocked by default, and the agent is told why so the developer can fix it. Agent actions on production systems, such as a push to a protected branch, wait for a named approver.

What security gets

A record of each blocked prompt and each held action, with the tool, the developer and the reason, and engineering keeps the tools it chose.

Rollout

  1. Step 1Raidu in front of Cursor and Windsurf for a pilot team
  2. Step 2Rolled out to engineering; Claude Code and Copilot added in beta
  3. Step 3Approval rule for agent actions on production systems

What they deployed

  • Coding Agents: Cursor and Windsurf generally available; Claude Code, Codex and GitHub Copilot in beta
  • Secrets blocked by default: cloud keys, tokens and private keys
  • Agent Firewall: tool calls checked, risky actions held for approval

Talk to us about your data and AI.

Tell us what you need to prove and to whom. We will show you the record it produces.

Talk to us