Hashling lives on your Mac and teams up with the AI you already use, like Claude, Cursor or Codex. It watches for scams, malware and AI agents that overstep, explains everything in plain words, and changes nothing until you approve with Touch ID.
Free and open source. Needs a Mac with Apple silicon (M1 or newer) and macOS 14 or later.
Hashling for Windows is on the way. It will watch the same things and work the same way: plain words, your own AI, and nothing changes without your OK.
What’s coming for Windows“Sophisticated attacks no longer require sophisticated attackers.”
Claude Code, Codex and Cursor can run programs, read your files and push code. Hashling shows what each one is allowed to do, warns you the moment one acts strangely, and catches project folders booby-trapped to make them run a stranger’s code.
Connect Claude or any AI you already use, or switch on Fully local and Hashling runs a free model right on your Mac. Ask “Am I safe?” or “Why is my Mac slow?” and it checks your Mac through Hashling first, then answers in plain words.
Paste a text, email or link, or drop in a screenshot. Hashling points out the tricks before you click, call or pay.
Plug a phone in by cable and Hashling checks it for stalkerware, hidden profiles and apps from outside the store. Or pair it over Wi-Fi to carry Hashling in your pocket.
It also watches malware, startup items, trackers, downloads, uploads and your settings. See everything it checks
Hashling checks your apps, network and files. Looking never changes anything.
You see exactly what would happen, and can ask why, before anything runs.
Approve with Touch ID. Most fixes can be undone, and clean-ups go to the Trash.
No account and no tracking. Nothing leaves your computer except what you send to the AI provider you choose.
A security app sees a lot of your computer, so you should not have to take our word for anything. Here is what you can check for yourself.
Every line is on GitHub under the MIT license. Anyone can read what it does.
AI assistants connected to Hashling can read and suggest. They cannot change anything on your computer.
Nothing is removed, quit or blocked until you approve it with your fingerprint. Most changes can be undone.
No account, no analytics, no data sent home. Your files stay on your computer, and your questions go only to the AI provider you choose.
Each release has a copy of the app signed with a verified Apple Developer ID and checked by Apple, plus checksums so you can tell nothing was changed.
OpenSSF Scorecard, from the Linux Foundation, grades how safely the project is run every week, and GitHub scans every change for security bugs.
The same checks and plain words, on your PC.
Warns you about scam and fake shop pages right in Chrome, Safari and Firefox, before you type anything.
Want to hear when they’re out? On GitHub, click Watch, then Custom, then Releases.
Free, about 10 minutes to set up, no experience needed.
Get Hashling for Maccurl -fsSL https://gethashling.com/install.sh | sh
Needs a Mac with Apple silicon and macOS 14 or later. Windows and a browser extension are coming soon.
