Stroq
Audits coding-agent sessions and can block secret exfil.
- AI tool
- Free
Pricing
Free and open source (Apache-2.0).
Overview
Stroq is a local audit and guard for Claude Code, Codex and Cursor sessions. It reads recent sessions and shows which commands came from text the agent read, plus which key names left the machine (never the values). Hooks can deny patterns such as curl|sh and secret exfiltration. Install with npx @stroq/cli; the README says there is no telemetry.
Key features
- Reads last 30 days of sessions
- Shows command provenance
- Key-name egress view (no values)
- Deny hooks for exfil patterns
Use cases
Show all 6Show fewer
Alternatives
Last updated 2026-11-06