See what every coding agent in your org did

Backplanes is air traffic control for AI agents. Every Claude Code and Codex session across your teams, rolled into one report - the risks that need a decision, what shipped, and where the spend went.

Developers: install free in a minute →

The gap

Claude Code and Codex have spread past engineering. Finance, procurement, and marketing are vibe-coding now, on systems and data nobody cleared. The board is starting to ask.

The org report

Value across the organization.

Every agent session across your org, rolled into one report. The CISO opens it as risk, your eng leads as engineering, finance as spend. Same telemetry, three ways to read it. No new instrumentation. Explore org reports →

Org report, Security view: top risks and a severity-triaged findings table

The risks that need a decision today: credentials in the open, egress violations, scope breaks, triaged by severity across every agent.

Governance

You decide what agents can reach.

Agents adopt their own MCP servers, tools, Skills, and external domains. Backplanes shows what was reached, by whom, and whether security signed off. Anything new lands unreviewed until you sanction it or block it.

External access

90-day observed window · generated now · organization-wide

External domains
47
MCP servers
12
MCP tools
31
Skills
9
Needs review
3
All 99MCP servers 12MCP tools 31Skills 9Plugins 4External domains 47Needs review 3Blocked 1
ResourceKindStatusSessionsCallsReached byLast
github.comdomain · git + api.github.comDomainSanctioned412,890team12m
web-searchmcp_server:web-searchMCP serverSanctioned221,2046 engineers1h
api.stripe.comdomain · paymentsDomainSanctioned14312alex, maya2h
api.example-vendor.comdomain · not on allowlistDomainNeeds review347maya2d
filesystemmcp_server:filesystemMCP serverSanctioned186425 engineers3h
pdf-exportskill:pdf-exportSkillSanctioned753alex1d
browser_navigatemcp_tool:playwright/browser_navigateMCP toolUnreviewed18260maya4h
unknown-cdn.iodomain · first seen this weekDomainBlocked12sam3d

Where it comes from

Every number has an audit trail.

Org reports roll up from per-session reports: a verdict, the findings worth acting on, and the full story of each run, one click deep. Your engineers get session reports free, every session, from day one. See the full report →

A Backplanes session report: verdict, time breakdown, findings, and the session story

How it works

Your team installs. The org report follows.

  1. 01

    Your team installs the CLI.

    $ curl -fsSL https://www.backplanes.com/spotlight/install.sh | sh

    Works with macOS, Linux, and WSL 2.

    Each engineer authenticates in the browser and joins the team account; their sessions start capturing as they finish. No agent changes, no admin rollout to schedule.

  2. 02

    Sessions roll up automatically.

    Auto-captureLive
    • 9:42 AMSession ended password-resetREADY
    • 10:15 AMSession ended auth-refreshREADY
    • 11:08 AMSession ended migrate-pg-v14Processing
    Actions from you0

    Spotlight captures sessions automatically when they end. Local redaction strips PII and credentials before anything leaves your laptop. You stay in flow.

    No OAuth into Anthropic or OpenAI. The CLI only reads sessions after they end.

  3. 03

    The org report fills in.

    Your reports today

    Needs review - 1

    password-reset-flowAgent opened /etc/passwd outside the task scope.

    Business as usual - 3

    • auth-refresh-tokenClean refresh, signature verified.
    • migrate-postgres-v14Migration ran clean, no schema drift.
    • ux-onboarding-tweakThree components updated, tests pass.

    The org report fills in as the team's sessions land: findings triaged by severity, spend attributed, the external-access inventory building itself. Each engineer gets their own session reports from day one.

We earn the trust we ask for.

Narrow access. Useful reports.

  • No agent OAuthSpotlight never touches your Anthropic or OpenAI accounts.
  • Completed sessions onlyThe CLI reads sessions after they end. It does not sit in the middle of your agent run.
  • Defense in depthPII and credentials are scrubbed locally before upload. A second pass runs server-side before storage.
  • Zero retention at the LLM layerContractual, for every provider we use.

Read more about trust →

Tell me what I don’t know. Because right now, nobody knows. There’s no visibility.

Former CISO · enterprise healthcare

Built by people who’ve been on the other side of this.

Built by leaders and practitioners from
Backed by

Pricing

Get started for free with your team.

Rolling Spotlight out across an org, with attribution, volume, or specific controls? Talk to us and we’ll set it up together. For individual developers and the teams they work on, Spotlight is free: no seats to count, no trial clock.

$ curl -fsSL https://www.backplanes.com/spotlight/install.sh | sh

Works with macOS, Linux, and WSL 2.

Move fast. See everything.

Your agents are doing more than ever, and most of it is invisible. Our first product, Spotlight, shows you what they did: each session today, your whole org's in one report. Over time, Backplanes will help you see, follow, and shape what every agent does. Air traffic control for AI agents, starting with the ones writing your code.

Or start where your engineers are: install free →

Get in touch

hello@backplanes.comJoin our Slack