Use Cases
Pick your starting point.
Available capabilities include setup guidance. Maturity badges identify BETA, PRIVATE PREVIEW, and COMING SOON work.
Govern your coding assistant
Claude Code, Cursor, Codex CLI, Gemini CLI, Kiro, Antigravity
No project code changes. Claude Code, Cursor IDE, and Gemini CLI block all tool families before execution. Codex CLI and Cursor CLI block shell only; Kiro CLI blocks direct tool calls, and sub-agent spawns from SDK 1.13.12 -- on any earlier SDK that matcher is never installed, so such a rule silently never fires; a sub-agent’s own calls are blocked only when it runs an agent config carrying our hooks. Kiro IDE neither blocks nor records today, because we ship its hook disabled pending a soak. On Antigravity the adapter fails closed, and the host treats that deny as advisory in headless/always-proceed, so the call may still run.
Get startedGovern an AI agent you're building
Python, Node.js SDKs
Wrap your tool calls. Policy enforcement runs in-process. Compatible with LangChain, CrewAI, AutoGen, PydanticAI, OpenAI Agents SDK.
Get startedGovern an existing AI app, no code changes
Gateway proxy
Change one base URL. Every LLM request goes through Control Zero's gateway. Existing agent code keeps working.
Get startedBlock sensitive data in AI chat
Browser extension for claude.ai, ChatGPT, Gemini, Perplexity
A deny rule cancels the paste before it lands and the send before it leaves. A mask rule rewrites the matched value in place.
Get startedDiscover where AI is being used in your org
Shadow AI Scout
Planned to identify unsanctioned AI usage across endpoints, network traffic, and SaaS catalogs, then pair with the gateway or hooks for policy enforcement.
Get startedSet up DLP rules for your team
Dashboard rule editor
Block credit cards, AWS keys, and internal project codes from leaving developer machines or LLM gateways. 64 patterns built in across 12 pattern packs, including EU, Japan, Korea, Hong Kong, Singapore, Taiwan, Indonesia and Malaysia, plus your own regex rules on the SDK and browser surfaces.
Get startedApprove risky actions before they run
Approval workflows
Pause sensitive tool calls and require human approval. The SDK raises the approval and holds the call on hosted, self-managed and air-gapped deployments. The approvals queue is not reachable in the dashboard today, so a raised approval cannot be answered from the product UI.
Get startedGenerate compliance reports
SOC 2-style and HIPAA-style report templates
Configure retention and export audit-trail reports from the dashboard to support your own SOC 2 and HIPAA audits. Control Zero itself is not certified; the product helps your auditors. Planned for Solo and Teams.
Get startedRun fully offline (air-gap)
Local mode + Self-Hosted
SDK runs entirely offline with a local policy file. No network calls per request. Self-Hosted dashboard is opt-in and contact-gated.
Get startedNot sure which one is for you?
Take the decision tree. Two minutes, one recommendation.