Skip to content

FAQ

Yes. OpenLatch is free for individual developers. The open-source client is MIT-licensed. The cloud detection service has a generous free tier for personal use.

What data does OpenLatch send to the cloud?

Section titled “What data does OpenLatch send to the cloud?”

Only action metadata — command strings, file paths, and network destinations. Your source code, file contents, and environment variables are never transmitted. See How It Works for details.

OpenLatch requires an internet connection for real-time threat detection. If the connection drops, OpenLatch fails open — your agent continues working normally. Bypassed actions are logged locally for later review.

OpenLatch works with any agent that supports tool call hooks:

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Custom agents via the OpenLatch SDK

Barely. The detection round-trip typically completes in under 100ms. If it exceeds the timeout threshold (default 500ms), the action is allowed through to avoid blocking your workflow.

Not currently. The detection engine runs as a managed cloud service. Self-hosting options are on the roadmap for enterprise customers.

Terminal window
openlatch uninstall

This removes the agent hooks and stops the local client. Your development environment returns to its previous state.

Where do I report bugs or request features?

Section titled “Where do I report bugs or request features?”

Open an issue on the OpenLatch GitHub repository.