A model's suggestion is not permission.
Start a review project on the repository you need to inspect. Tools are gated by one permissions file, reading outside the project asks first and names the folder, and a project link cannot hand the agent your keys.
What it takes to begin
No assuming that a model's suggestion grants permission to act.
A Mac
Bandicot is a Mac app. The work happens in your folders, on your machine.
A folder
Keep files, context, plans and decisions with the project instead of losing them in a disposable chat.
security-file-review/A model
A local model, an OpenAI-compatible endpoint, or a hosted provider you sign in to. The provider bills you directly.
Free
For one person on your Mac. Every plan has every capability.
Three steps to a first result
Start a review project on the repository you need to inspect, with a local model if the code must stay home.
Say what the job is
Keep agent-assisted source review inside an explicit tool boundary.
security-file-review/It works, you stay in charge
When work can change files or systems, Bandicot makes the decision visible before the effect lands.
Take the result or undo the run
Every changed file is recorded, and undoing a run puts its files back with one click.
Who this is for
Made for
Security reviewers who validate findings themselves.
Security engineers performing source code reviews
Not yet for
Teams seeking a security certification or guaranteed vulnerability detection.
A day with it
No assuming that a model's suggestion grants permission to act.
First thing
The job lands
Giving an agent access to a codebase you are auditing should not also give it your SSH keys, your browser profile and the folder next door.
Mid-morning
You hand it over
The boundary is explicit and yours: the permissions file decides, outside folders are named before they are read, and you choose per session where the prompts go.
After lunch
A trusted harness around the model
Bandicot gives every agent a project, tools, a session that survives restarts, approvals, and a clear place to stop.
Before you close the lid
You read what changed
Source review with visible tools and deliberate provider routing.
Source Review Desk
Every line below is already in the plan. Nothing here is an extra you pay for.
- Tool approval by rule, in one permissions fileincluded
- Reading a folder outside the project asks first and names itincluded
- A local or hosted model, chosen per sessionincluded
- A model added from Hugging Face is checked to fit and never run if the file changesincluded
- Durable review sessionsincluded
- Free for one profileincluded
Free for one person on your Mac, no card. Your model provider bills you directly.
No contract. Cancel any time from your account and keep the plan until the end of the period you paid for.
If it is not for you
No contract. Cancel any time from your account and keep the plan until the end of the period you paid for.
Your files stay yours
The agent does its work in your own folders on your Mac, so the files are yours to keep.
Start without paying
The free plan has every capability for one profile, and asks for no card.
Put a run back
Every changed file is a version, so a run you regret is one click from undone.
A model's suggestion is not permission.
Free for one person on your Mac, no card. Your model provider bills you directly.