Failure map
The exact risky action, trigger, accountable owner, current safeguard, and missing proof.
Self-improving under your control
Self-Improving Firewall for Your AI Agents.
Every approval teaches it what to allow, block, or escalate next time.
Two paid paths: self-serve Pro at $19/mo for operators, or the $499 enterprise entry offer for engineering and security leads using Claude Code, Cursor, Codex, or similar agents after a real workflow failure.
Capture feedback
Rank lessons
Promote gates
Check next action
See a strict-mode deny example ↓
npx thumbgate init free local evaluate · setup guide · full pricing
Self-improving product loop
Pre-action checks—and the systems that refine them.
No governance novel. Corrections become reviewable local lessons; relevant lessons are re-ranked; repeated negative patterns can become explicit gates; and the next action is checked before execution. Click a step to see what happens under the hood.
1
Capture feedback
Record explicit 👍 or 👎 feedback with the action and outcome context that made it useful or wrong.
Under the hood ↓
2
Remember locally
Store a reviewable lesson that survives sessions and model changes without sending the control history into model weights.
Under the hood ↓
3
Rank and refine
Re-rank relevant lessons for the action. Repeated negative patterns can promote from warnings to blocking gates; stale gates expire.
Under the hood ↓
4
Gate the next action
The action is allowed, warned, or denied before the tool proceeds.
ALLOW
WARN
DENY
Under the hood ↓
Under the hood
Capture feedback
Each reviewed outcome closes the loop—under your control. Lessons are re-ranked per action, repeated failures can promote into gates, and stale auto-promoted gates expire. The firewall improves from explicit feedback without retraining the model or silently rewriting policy.
What the $499 enterprise gate buys
A managed gate for one painful workflow.
This is the enterprise entry offer for one workflow, not an org-wide hosted platform license.
Configured gate
One supported local rule wired to deny, warn, or require a human before execution.
Regression and rollout proof
The working test, rollout check, rollback boundary, and evidence receipt for the installed gate.
Boundary: the offer covers one supported local workflow. Multi-system implementation, legal or compliance certification, guaranteed savings, and hosted team features require separate scope. If the workflow cannot be reduced to one supported gate, the order is refunded instead of silently upsold.
What “stop” honestly means
Hard deny where configured. Honest warning everywhere else.
proposed git push --force origin main mode strict enforcement rule protect-main source core protection · strict mode decision DENY reason force-push to protected branch next decision recorded before execution
Detected secret exfiltration and attempts to kill or bypass the gate process are denied by default. Matching destructive actions warn by default and deny in strict mode.
The example shows the strict-mode decision the managed install would specify and test. It is not a claim that every free install blocks every risky command automatically.
Read the test-backed verification evidence →Before you buy
Five questions, answered plainly.
One 60-minute working review for one repeated AI-agent workflow failure, one configured local gate for a supported workflow, its regression test, and a written rollout and rollback proof within two business days after access and the agreed materials are available.
No. Detected secret exfiltration and gate-process bypass attempts are denied by default. Matching destructive actions warn unless strict enforcement is enabled. The managed gate defines the right boundary for your workflow instead of pretending every warning is a firewall.
Yes. The $499 Enterprise Workflow Gate is the enterprise entry offer for one supported workflow. It is not an org-wide hosted platform license: shared hosting, SSO, compliance packaging, and multi-workflow rollout require separate scope and are not generally available.
No. ThumbGate does not change model weights and does not silently rewrite production policy. Self-improving under your control means explicit approvals and feedback teach the local control layer what to allow, block, or escalate next time: lessons are stored and re-ranked, repeated negative patterns can promote into gates, and stale auto-promoted gates expire.
No. The promotion, demotion, and lesson-ranking logic ships in the public npm bundle under an MIT license — run
npm pack thumbgate and read it yourself. Your lessons live in a local SQLite file you own, not a server you can't query. Paid tiers add hosted sync, the dashboard, and adapter coverage, not access to intelligence withheld from the free install.Two cash paths
Start self-serve, or bring the failure that already cost you time.
Pro is the self-serve subscription for operators. The $499 enterprise gate is a managed install for one painful workflow—not another policy deck.