Opportunities › AI agent security and visibility for endpoints › Proposed app
Paddock
See, approve and audit what AI agents do on your company's laptops
- Score
- 59
- confidence 45
- Evidence
- 3
- items on the page
- Rivals
- 1
- named in sources
- First version
- 60 d
- estimate
- Type
- Desktop and mobile
- PWA: on computers and phones alike
- Market since
- 2025
- New market · AI estimate
ScreensConcept
Desktop and mobile: Security teams review timelines and write rules at a desk, but must approve risky agent actions urgently from phones wherever they are. Sample screens on a computer and a phone, in the proposed brand. Their numbers are sample data.
Live timeline
2 need a decision1,284
About this appAI proposal
Paddock is a web console for security and IT teams who have AI agents running on employee laptops and servers. A small endpoint collector sends agent actions to Paddock: files touched, commands run, network calls, tools invoked. You see them in one live timeline, grouped by agent and session.
You set rules in plain terms, such as 'no agent may read the .ssh folder' or 'ask a human before any delete over 50 files'. Rules can alert only, or ask for approval on your phone before the action goes ahead. Every session can be replayed step by step for an audit.
It is built around agent behavior, not adapted from malware or insider-threat tools. It is a hosted console for teams who want policy, approvals and audit reports without running their own back end.
- Tagline
- Let agents work. Keep a hand on the gate.
- Voice
- CalmPrecisePlain
- Why this name
- A paddock is a fenced area where animals move freely but within limits, like agents on a managed endpoint.
In the first version
Members say which features they would use. It tells PWAS what people want; it changes no score.
Live agent timeline
Every action by every agent across your endpoints in one stream, filtered by device, person, agent or risk level.
No member yet
Plain-language rules
Write policies about files, commands, networks and tools. Start in alert-only mode, then switch single rules to blocking.
No member yet
Approve from your phone
Risky actions pause and ask a named approver. Approve or deny in the installed app, with full context shown.
No member yet
Session replay for audits
Rebuild what an agent did step by step, with tool calls and changed files in order. Export as PDF or CSV.
No member yet
Brand identityAI proposal
Check the name against trademark registers before using it.
Palette
#1F5C4DPine · primary#F5F1E8Oat · surface#1E2A26Ink · text#D9822BAmber · accent#3A6EA5Slate blue · data#B3382CBrick · alert
Typography
Aa
Paddock
PricingAI proposal
The material gives no competitor prices; the one named competitor is open source. These per-endpoint tiers are a starting point to test, not a market-based figure.
Starter
Free
- Up to 5 endpoints
- Live timeline
- Alert-only rules
- 7-day history
Team
$6 a month
- Per endpoint, billed monthly
- Blocking and phone approvals
- 90-day history and replay
- Email and webhook alerts
Business
$12 a month
- Per endpoint, billed monthly
- 1-year history
- Compliance report pack
- Single sign-on
What it could be worthEstimate
What a software business making this much sells for today, from real deals. Pick a monthly revenue.
If it makes
Worth about
$194,000
Sale range $132,000 to $263,000
$120,000 a year in revenue
From 87 software businesses listed and sold on Empire Flippers in the last year, revenue vetted by the broker: they sell for about 19× their monthly revenue, most between 13× and 26×.
Measured on profit, the middle deal is 32× monthly net profit: about 2.7 years of profit.
An estimate, not an offer or financial advice. A real price depends on profit, growth, churn, how much of the work is the owner's, and the buyer.
How it would growAI proposal
How the product would reach new customers through its own use, and how the first ones would be found. A plan to test, not a result.
- Built-in loop
- No loop in the product. Paddock is installed by a security team on its own devices. Approval requests go to named colleagues, but they act as approvers inside one company, not as outside buyers.
- Do they become customers?
- Growth must come from sales and content. Test whether security leads who try the free tier on 5 devices convert to paid fleets within 60 days.
- First customers
- Security leads at software companies with 50 to 500 staff where developers already run coding agents on laptops.
- Where to reach them
- Open-source security communities: Post guides on writing agent rules; offer a collector that works beside open-source tools.
- Security practitioner forums: Share sample audit reports and ask leads for design-partner trials.
- Direct outreach: Contact security leads at companies hiring for AI governance roles.
- First milestone
- Five paying design partners in one vertical, each with at least 25 endpoints under rules.
Why people already pay for this
- VerifiedGitHub repository gained 1106 stars in 79 days
- Public claimThe repository addresses AI agent security as a distinct category, indicating that traditional endpoint security tools are insufficient for this emerging threat.
- AI inferenceStrong community interest in AI agent security tooling, demonstrated by significant adoption metrics for an open-source security tool.
Tech stack
Every proposal builds on the same PWA base, installable from the browser on any phone or computer. Dashed boxes are what this app adds.
- AppNext.js and TypeScript
- PWAManifest and service worker
- UITailwind CSS
- Data and authSupabase Postgres
- PaymentsStripe
- EmailResend
- HostingVercel
- This app · Endpoint collectorSmall signed agent for macOS, Windows, LinuxEvents and blocking happen on the device; the PWA cannot see or stop local actions.
- This app · Event ingestionQueue and time-series storage for event streamsThousands of small events per device need fast writes and cheap retention.
RisksAI inference
- TechnicalReliably seeing and pausing agent actions on three operating systems needs deep OS hooks. Agent tools change often, so coverage may lag.
- CommercialA free open-source tool offers similar detection, blocking and forensics. Teams may self-host rather than pay for a hosted console.
- PlatformEndpoint software needs OS permissions, code signing and IT rollout. Large endpoint vendors may add agent features.
- DataSession records can contain prompts, code and personal data. Storing them raises privacy and retention duties for customers.
- CommercialEvidence shows GitHub interest only (stars). Willingness to pay for a hosted product is unverified.
Everything marked AI proposal or AI inference was written by a model from the evidence on the opportunity page. The proposed name must be checked against trademark registers before it is used.