CAIN-42 CAIN StudioThe niche: security for AI coding agents
Every company whose developers use AI coding agents. It is one of the fastest-growing uses of AI, and security teams are uneasy about agents that can run anything on a developer's machine.
Why this niche exists now
- AI coding agents spread to most developer teams very quickly.
- They run real commands with the developer's permissions.
- Prompt injection through READMEs, issues and dependencies is a documented attack path.
- Security teams are asked to approve agent use and lack controls.
What people use today, and where it falls short
| What teams do today | Where it falls short |
|---|---|
| Trust the agent's own confirmations | Developers click yes all day and stop reading. |
| Run agents in a container | Safer but inconvenient; many teams skip it. |
| Ban coding agents | Developers use them anyway. |
What makes CODEGUARD different
- Deterministic rules: the agent cannot argue its way past them.
- Catches disguised variants (base64, quoting tricks, download-and-run).
- Signed receipt per decision.
- Tested on blind attack sets we published, including the misses.
How big is the opportunity?
Do not quote market-size statistics on a call. Most published figures are surveys or vendor estimates, and a smart buyer will ask for the source. Size the opportunity per prospect instead, with these questions:
- How many developers use coding agents?
- On laptops, servers or both?
- Has security approved it?
If the honest answers are "no" or "not yet", they are not a buyer today. Note it and move on; that is good selling, not failure.
Explain the niche in 30 seconds
Every company whose developers use AI coding agents. It is one of the fastest-growing uses of AI, and security teams are uneasy about agents that can run anything on a developer's machine.
CODEGUARD checks every command a coding agent is about to run and blocks the dangerous ones before they happen.
Practise saying this out loud until you can do it without reading. Then say it in your own words.
Words your buyers use
These are the phrases people in this niche type into search engines and use in posts and job ads. Use them to find prospects (page 3) and to talk their language:
Claude Code security Cursor security coding agent guardrails AI agent shell commands prompt injection README
Sell it together with
Buyers rarely have just one problem. When this product fits, these often fit too:
| Product | Why it goes together |
|---|---|
| Signed decision receipts | the signed evidence of every decision |
| Policy Red-Team | attack the team's own rules |
| Black Box flight recorder | record what ran |
Rule: open with one product. Mention a second only after the first is agreed.
Next: who buys and where to find them →
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.