About Guardrails

Extension intelligence built around exact evidence.

Guardrails is an independent security product for evaluating IDE extensions before installation and following their published releases afterward.

What the product does

It retrieves an exact published artifact, performs static analysis without launching extension code, and records findings, coverage, artifact identity, scanner build, and ruleset.

What can be verified

Public reports expose the version and SHA-256 boundary. The validation study publishes its corpus, regression results, corrections, and claim limitations.

What is not claimed

Guardrails does not claim that every allowed extension is safe, that a capability proves malware, or that the development benchmark measures ecosystem-wide accuracy.

Evaluate the evidence

Start with a public artifact.

No account is required to inspect public extension reports or validation evidence.

Explore public intelligence