Confessor
A forensic tool that reconstructs AI coding agent sessions from local logs to detect sensitive file reads and data exfiltration attempts.
Confessor
What is Confessor?
Confessor vs Similar AI Tools
| Pricing Model | Free | Free | Free | Free |
| Free Credits | ||||
| Key Features |
|
|
|
|
| Pros |
|
|
|
|
| Cons |
|
|
|
|
| Best For |
|
|
|
|
How to use Confessor?
- 1Ensure Node.js >= 18.17 is installed.
- 2Run `npx confessor` to analyze local Claude Code logs (automatically finds `~/.claude/projects`).
- 3Optionally, provide a path to a chat export ZIP file (e.g., `npx confessor ~/Downloads/chatgpt-export.zip`) to scan chat histories.
- 4View the generated `confessor-report.html` in your browser.
Confessor Key Features
- Agent session reconstruction from Claude Code JSONL logs
- Detection of sensitive files opened (e.g., .env, SSH keys, browser passwords)
- Secret detection in agent context using 30+ pattern rules
- Exposure path identification (sensitive read followed by network call)
- Zero network calls and zero runtime dependencies
- Chat history scanning for ChatGPT, Claude, and Gemini exports
- Structural redaction of secrets in output
- Offline HTML report with CSP blocking external loads
Confessor Use Cases
- Audit what an AI coding agent accessed during a task
- Detect potential data exfiltration by AI agents
- Compliance review of AI agent interactions with sensitive files
- Personal privacy audit of chat history with AI services
Confessor Pricing & Free Credits
Confessor currently operates on a Free model.
This tool is completely free to use
Confessor Pros & Cons
Pros
- Zero network calls ensures complete privacy
- No dependencies required to run
- Detects exposure paths that other tools miss
- Works offline on local logs only
Cons
- Currently only supports Claude Code log format
- Detection is rule-based, may miss novel patterns
- Retrospective only, not real-time monitoring
What is Confessor best for?
- Developers using Claude Code or similar AI coding agents
- Security auditors reviewing AI agent behavior
- Privacy-conscious users wanting to inspect chat exports
Confessor FAQ
Top free alternatives to Confessor
A voice-controlled IDE that enables developers to initiate AI coding sessions with Codex or Claude Code, approve commands, and review diffs from their phone.
SureWire is a specialized QA platform that stress-tests AI agents for safety, reliability, and compliance using purpose-built testing agents.
Browser infrastructure platform for AI agents to run on the internet at speed with cloud browser sessions, agents, and serverless functions.
An agent-first file transfer tool that enables secure, encrypted file sharing between AI agents via MCP calls without human involvement.
Manifest converts any URL into a structured JSON map of what AI agents can interact with on a page—buttons, forms, inputs, and required fields.
A cooperative gate for shell commands that AI agents run, providing previews, backups, policy enforcement, and audit for tools like Claude Code and Cursor.
Agentcard provides agent-friendly card issuing and payment infrastructure for AI agents, enabling 5-minute setup and autonomous purchases.
Best alternatives AI Tools to Confessor
A collection of deliberately vulnerable MCP servers for training in agentic security, mapped to the OWASP Top 10 for Agentic Applications.
Open-source AI tool for deep infrastructure research, running frontier models across code, cloud, and runtime to deliver verified answers.
Magpie is an opinionated accounting CLI for humans and AI agents, providing double-entry bookkeeping with RBAC and immutable event storage on Jaybase.
Terminal UI to manage AI coding-agent sessions (Claude Code, OpenCode, Codex, Grok Build) in tmux with live status, group tree, and diff review.
A voice-controlled IDE that enables developers to initiate AI coding sessions with Codex or Claude Code, approve commands, and review diffs from their phone.
Zero-config, single-binary software catalog with auto-discovery, dependency visualization, compliance scorecards, and native MCP integration for AI agents.
Browser automation CLI for AI agents to bypass anti-bot walls, hand off to humans, and run parallel tasks.
An AI-powered shopper assistant that provides a live cursor to guide website visitors, point out products, and display price calculations.