Use case · Coding agents

Control AI coding tools in your team.

AI coding tools put the full codebase in front of a model. Point them at Raidu’s endpoint and checks run on every prompt, every tool call and every output before the model sees them, and every token is counted against a per-developer budget.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
A secret appears in a prompt; the developer finds out from the model's answer.The check fires before the prompt leaves the machine. The key type is named; the prompt is blocked.
An agent reads .env and posts the contents to a webhook. No alert.Reads of .env, .aws, .ssh, .kube and credential files are blocked before the tool runs.
Token spend is invisible until the invoice.Each developer has a keyed endpoint and a budget, with alerts.

Point your coding tools at Raidu's endpoint. PII, secrets and exfiltration attempts are checked at every step, not after the fact.

Source: Claude Code hook integration and session audit service

How Raidu handles it

What each check blocks.

  1. 01

    PII and secrets in the prompt

    Before the prompt reaches the model, Raidu scans it for dozens of personal-data and credential types. Anthropic, OpenAI, GitHub, Slack, Google and AWS keys, private keys, connection strings, JWTs and bearer tokens are blocked by name. The developer sees which type was caught.

  2. 02

    Dangerous tool calls before they run

    Before any tool executes, Raidu checks the call. Reads of .env, credentials, .pem, .key, .aws, .ssh and .kube are refused. Exfiltration patterns (curl -d, wget --post, scp, rsync, nc) are blocked. The tool never runs; the refusal is logged.

  3. 03

    Output and session close

    Tool output is scanned for personal data before the agent reads it. At session end, the full session is written to the audit trail: every prompt, every tool call, every decision, every token count.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

The record

The session, on the record.

Every coding session produces a tamper-evident audit trail from the first prompt to the last step.

Session 2,841 Coding session · UserPromptSubmit · 10:33:17Z
Developer
Key dk-0031
Detected
STRIPE_LIVE_KEY in prompt body
Tool calls
PreToolUse: .env read blocked
Verdict
Prompt blocked at hook
Proof
Tamper-evident
sha256 08106b5ed0278a75c9b71a1dda5c9131…
entry 2,849 of 11,301 · write-once

Common questions

Answered straight.

Which coding tools does this cover?
Any tool that calls an AI model API. Point the tool at Raidu’s compatible endpoint and every session is governed from that moment on.
How does token budgeting work?
Point your coding tool at Raidu’s compatible endpoint with a per-developer key. Every token is metered against that developer’s budget, with alerts.
What exactly does the tool-call check block?
Reads of .env, credentials, .pem, .key, .aws, .ssh and .kube files. Exfiltration patterns: curl -d, wget --post, scp, rsync and nc. The tool never runs; the refusal lands on the audit trail.
What credential types does it catch at the prompt?
Dozens of credential types by name: Anthropic, OpenAI, GitHub, Slack, Google and AWS keys, private keys, connection strings, JWTs and bearer tokens, and more. It also detects standard personal-data types in the same pass.
Does it slow developers down?
You choose how deep the checking goes for each use case.
Where does the audit trail live?
Inside your own cloud install. Session logs, token counts and blocked-call records stay inside your cloud.

Every session logged. Every token counted.