Catpilot
Talk to us
Menu

Security companion

Your everyday security companion.

Practical security coaching and compliance training in the tools your team already uses. Help people develop good habits, follow company guidance, and build safely with AI.

Start free Talk to us

Coaching in Slack and Microsoft Teams Your company's rules in Claude, ChatGPT, and coding agents No separate LMS

Listed on the Slack Marketplace (opens in a new tab) and the Microsoft Marketplace (opens in a new tab)

CatpilotSample coaching conversation in team chat
Catpilot

You're building a customer lookup tool with an AI assistant. It suggests pasting last month's customer export into the prompt. What do you do first?

Builder

Use a sample file with fake names and no card numbers.

Catpilot

Good. And where will the finished tool live?

Builder

Our approved internal hosting, behind SSO.

Catpilot

Checkpoint complete. Synthetic data, approved hosting, company SSO. Saved as evidence.

Coaching

Start where the risk is.

Short, scenario-based modules. People answer in their own words, in team chat, and get coached on what they missed.

For the whole team

Security awareness
essentials

Annual security awareness, in plain language.

Phishing Data sharing Account safety

For every role in PCI scope

PCI DSS 4.0.1
by role

Separate tracks for engineers, payment ops, and other teams that handle cardholder data. Training evidence toward Requirement 12.6.

Engineering Payment ops Cardholder data

For non-engineers building with AI

Safe AI-assisted
building

From an idea to a safer first app: what to share, who gets access, when to ask for a review.

Data Access Hosting Sharing

Modules are enabled per workspace. We confirm what's live for your team before you start.

Safe AI building

Same guidance for
the person and the tool.

Employees are building with AI whether or not security signed off. Publish your company's rules once, and the assistants they already use check each plan against them while they build. They name your approved places and the person to ask, and low-risk work carries on.

Needs a personIn Claude, with Acme's rules connected
Builder

Managers want each employee's salary band next to their name in the directory. The AI said it's a small change. Go ahead and add it.

Assistant

Not yet. Acme's rules treat salary bands as employee pay data, and showing them needs the data owner's written agreement. Check with security@acme.example first; I can draft the request. Meanwhile I'll build it manager-only, with made-up salary data.

Good to goIn ChatGPT, with Acme's rules connected
Builder

@Acme rules I made a demo with pretend data. How do I share it with the two teammates in our pilot?

Assistant

Put it on Acme Internal Apps behind company sign-in, open to those two people only. Skip the shared password and the public link. Here's a note you can send them.

Examples with a made-up company. Advisory: the assistant explains and suggests; nothing is blocked.

In Claude and ChatGPT

Before helping with something risky, the assistant checks the plan against your rules. It asks only the question that matters, names the approved option, and says who to ask when a person has to decide.

No quizzes or grading here, and no new login: an admin connects one company link through Catpilot's MCP server.

In coding agents

Claude Code and Codex get the same company rules through the connector and a private skill in your team's repositories. The open-source skills are free for Claude Code, Codex, and 50+ other agents.

npx skills add catpilotai/catpilot-ai-guardrails

Advisory, not enforcement.

View on GitHub (opens in a new tab)

For your company

Write down your approved hosting, services, data rules, and who to ask. Each published version records who approved it. Catpilot records which check ran and its outcome, never what people typed.

Included in Plus

Evidence

Training evidence.
Precisely described.

Every completion, acknowledgment, and content version is recorded as the work happens. Export a training evidence pack on demand. It says exactly what it covers, and nothing it doesn't.

Training evidence pack

Training only
  • Included: Per-person completion and dates
  • Included: Acknowledgments, where required
  • Included: Content versions and recorded exceptions
  • Included: PCI 12.6 mappings, where reviewed and applicable
  • Not included: Not an audit opinion or application security test

Pricing

Start free.

Plus

Custom

For teams that need company-specific coaching and proof.

  • Full coaching library for your workspace
  • Your company's rules in Claude, ChatGPT, Claude Code, and Codex
  • Custom coaching modules from your approved policies, in Slack and Teams
  • Training evidence packs and assessor access
  • Nudges, escalations, weekly receipts
Book a demo

Company

Who's behind Catpilot

Basil Hafez

Basil Hafez

Founder

Basil led engineering teams at big tech companies and several startups, seeing firsthand how security training and tools go unused when they add friction. He started Catpilot to build a healthy security culture into the tools teams already use, without new logins or hurdles.

Basil on LinkedIn (opens in a new tab)