gno.security

gno.security is a security agent blocks server software flaws until vendor fixes arrive, using signed rules and a swarm.

Repairer is a security agent that blocks server software flaws the day they go public while you wait for official vendor fixes. A small program on each server blocks a flaw's trigger under rules you sign using your hardware wallet, stepping aside once the real fix runs. A swarm on gno.land writes and checks stopgaps with money at stake through AI sessions. The agent runs on Ubuntu and Debian, handling tasks like reboots, fallback checks, and read-only audits. It relies on your rules to dictate approvals from you, test machines, chosen people, or your own AI, ensuring safety limits and automatic undos.

gno.security at a glance

Best for: Software engineer, Director
Runs on: Linux, Ubuntu, Debian
Pricing: Paid
Released: November 2026
Category: AI agent tool
Website: gno.security

Key features

Blocks flaw triggers on servers before vendor fixes arrive
Uses signed rules from your hardware wallet
Employs a swarm on gno.land to write and check stopgaps
Tests stopgaps on fresh test machines with economic bonds
Reboots into new kernels with a fallback if failures occur
Performs read-only checks to see if servers were hit
Removes stopgaps automatically once vendor fixes run

Use it for

Blocking zero-day server vulnerabilities before patches
Checking if servers were compromised before a fix
Managing automated security responses via signed rules
Verifying kernel reboots and fallback procedures

Alternatives to gno.security

MCP Bouncer — Stops agents from exfiltrating data to destinations found in untrusted tool output.
Netlumi — Scans cloud accounts and code, then opens pull requests with fixes.
BrowserOS — Runs entirely locally and lets AI agents use real user logins to complete tasks.
Maintenant — Monitors Docker, Kubernetes, and uptime from a single low-memory binary.
Truth Firewall — Blocks unverified coding agent completion claims automatically.
Sectr — Hosts any framework with durable sessions and serverless human-in-the-loop approvals.
Kilasec — Stops runaway spend and masks sensitive data without modifying agent code.
GoClaw — It offers Go-native performance with multi-tenant isolation and 5-layer security.
Silo CLI — Runs untrusted AI agents safely inside hardened Docker sandboxes with controlled egress.
Guilds — Runs standing teams of AI agents with deep inspectability.
Rugsnare — Pins tool contracts by SHA-256 and diffs upgrades to catch silent changes in CI.
FakeLiang — Verifies attack paths step by step with traceable call records and evidence.

All gno.security alternatives