Skip to content

Security

Trust your machine,
not our cloud.

Prometheus runs locally, logs every action, and only touches what you grant it.

Architecture

Everything stays inside the line.

Your files, memory, browser and logs live on your machine. Only prompts go to the model you picked.

YOUR MACHINEFilesMemoryBrowserAudit logPrometheusgatewayModel you choseyour key · prompts onlyYour phoneprivate tunnelOur serversno relay · no telemetry

Audit trail

Nothing happens in the dark.

Every tool call is written to a local log you can read, search or pipe anywhere. Risky actions wait for you.

~/.prometheus/audit/2026-10-07.jsonl
09:14:-5web_search"competitor b pricing"ok
09:14:02browser_opencompetitor-a.com/pricingok
09:14:09extract_table3 plansok
09:14:16file_writeDownloads/pricing-oct.xlsxok
09:14:23memory_writepricing baselineok
09:14:30email_sendneeds approvalheld

Controls

Six guardrails, on by default.

01

Permissions

Browser, files, desktop: nothing runs without a grant.

02

Isolation

Sessions, jobs and agents each get their own scope.

03

Approvals

Sends, posts and purchases wait for your tap.

04

Local storage

Memory and history live in a folder you own.

05

Your keys

You bring the model keys. We never see them.

06

Kill switch

Close it and it stops. Delete the folder and it's gone.

What we don't do

The short list of nevers.

Store your chats
Train on your data
Sell your analytics
Require the cloud
Hide tool calls
Act without a log