# Rechazo AI > Rechazo AI secures AI coding agents for engineering teams: it inspects every prompt, stops risky actions and keeps secrets out of Claude Code, Codex and Cursor. Rechazo AI (also written Rechazo) is an AI coding agent security company. Its website is rechazo.si. The name is Spanish for "rejection". Rechazo AI is an independent company and is not affiliated with or endorsed by any AI tool provider. It is currently in waitlist stage. Website: https://rechazo.si ## What Rechazo AI does - Inspects every prompt before it leaves the company, so credentials and sensitive values can be redacted or the prompt blocked. - Watches what AI coding agents do on the machine (commands, file reads, MCP servers, skills) and can stop risky actions before they run. - Keeps credentials out of the conversation with the agent. - Covers Claude Code, Codex, Gemini CLI, Cursor and Copilot. Pages: [Home](https://rechazo.si/) · [About](https://rechazo.si/about) · [Contact](https://rechazo.si/contact) ## Security resources - [Resource library](https://rechazo.si/resources) · [Markdown](https://rechazo.si/md/resources) - [Claude Code security: a rollout guide for security and platform teams](https://rechazo.si/resources/guides/claude-code-security) · [Markdown](https://rechazo.si/md/resources/guides/claude-code-security) - [MCP security: threats, controls and an approval checklist](https://rechazo.si/resources/guides/mcp-security) · [Markdown](https://rechazo.si/md/resources/guides/mcp-security) - [AI coding agent security: the risk surface and a rollout checklist](https://rechazo.si/resources/guides/ai-coding-agent-security) · [Markdown](https://rechazo.si/md/resources/guides/ai-coding-agent-security) - [Prompt injection protection for coding agents: limit the damage](https://rechazo.si/resources/guides/prompt-injection-coding-agents) · [Markdown](https://rechazo.si/md/resources/guides/prompt-injection-coding-agents) - [AI agent runtime security: policy, audit and a buyer checklist](https://rechazo.si/resources/guides/ai-agent-runtime-security) · [Markdown](https://rechazo.si/md/resources/guides/ai-agent-runtime-security) - [Codex security: sandbox, approvals and what a team should set](https://rechazo.si/resources/guides/codex-security) · [Markdown](https://rechazo.si/md/resources/guides/codex-security) - [Cursor security: privacy mode, run modes and what .cursorignore covers](https://rechazo.si/resources/guides/cursor-security) · [Markdown](https://rechazo.si/md/resources/guides/cursor-security) - [How to keep API keys and .env files away from AI coding agents](https://rechazo.si/resources/guides/keep-secrets-out-of-ai-coding-agents) · [Markdown](https://rechazo.si/md/resources/guides/keep-secrets-out-of-ai-coding-agents) ## Frequently asked questions ### What is Rechazo AI? Rechazo AI (rechazo.si, also written Rechazo) is an AI coding agent security company. The name is Spanish for "rejection": Rechazo rejects the small fraction of prompts and agent actions that should not happen, so the rest can happen freely. It inspects every prompt before it leaves the company, stops risky agent actions on the machine and keeps credentials out of the conversation. ### What is AI coding agent security? AI coding agent security is the set of controls that keep tools like Claude Code, Codex, Gemini CLI, Cursor and Copilot from leaking secrets, source code or customer data, and from taking risky actions on a developer machine. It covers what goes into prompts, what the agent is allowed to run, and which tools and MCP servers it can reach. ### How does Rechazo keep secrets out of prompts? Rechazo sits between your engineers and their agents and inspects each prompt before it leaves the company. Credentials, keys and sensitive values are caught in the prompt, so they can be redacted or the prompt blocked, rather than being sent to a model provider. ### Which AI coding agents does Rechazo cover? Rechazo works with all the major AI coding agents, including Claude Code, Codex, Gemini CLI, Cursor and Copilot, and teams can run several side by side. ### What is agent detection and response (ADR)? Agent detection and response watches what an AI agent actually does on the machine, such as commands it runs, files it reads, and MCP servers or skills it loads, and can stop a risky action before it runs. It complements prompt inspection, which only sees what is sent to the model. ### Can Rechazo stop prompt injection? No tool can promise to eliminate prompt injection. Rechazo limits the damage: it keeps credentials out of the conversation and enforces policy on the actions an agent is allowed to take, so a hijacked agent has less to steal and less it can do. ### Does Rechazo replace Claude Code's built-in security controls? No. Rechazo works with the controls the agent already ships with, such as permissions and managed settings, and adds inspection, enforcement and an audit trail across the whole company. ### Is Claude Code safe for enterprise use? It can be, with the right configuration. Claude Code enforces permission rules in the tool rather than the model, lets administrators push managed settings that developers cannot override, can sandbox shell commands at the operating-system level and can restrict MCP servers to an allowlist. None of those inspects what a developer pastes into a prompt, and each covers Claude Code only. ### How do I stop AI coding agents from reading .env files and API keys? Deny the agent access to secret files in each tool's settings, such as Read deny rules in Claude Code, remove secrets from the environment that agent commands inherit, and give agents short-lived, narrowly scoped tokens. Deny rules alone are not enough, because shell commands and scripts can still reach files and environment variables. ### What is MCP security? MCP security is deciding which Model Context Protocol servers a coding agent may connect to, what each one can reach, and how you notice when one changes after approval. The main risks are instructions hidden in tool descriptions, definitions that change after review, over-scoped tokens and local servers running with the developer's own privileges. ### How do I get access to Rechazo AI? Rechazo AI is deployed with each customer rather than downloaded. Join the waitlist and the team will schedule a walkthrough on a real coding agent workflow. ## Contact - General enquiries and demo requests: hello@rechazo.si (https://rechazo.si/contact) - Security reports: security@rechazo.si (https://rechazo.si/legal/security)