Skip to contentGrace now guards Claude Code and Cursor while they write.  →

[ Infrastructure for AI software reliability ]

Your AI writes the code.
Grace keeps control of it.

Grace sits between your AI agents and your production app. It holds every change to your rules, stops the risky ones before they land, and only puts its seal on what it can prove.

Free on one app · No credit card · Code hosted in France

62
Repository healthacme-app · mainRead 1,284 files and 312 commits in 4 min

WHAT WILL BREAK FIRST

  • CRITICALStripe webhook accepts unsigned eventsapp/api/stripe/route.ts:42
  • CRITICALService key shipped in client bundlelib/supabase.ts:7
  • HIGHNo rate limit on the signup endpointapp/api/auth/signup/route.ts
  • HIGHCheckout has no test, 14 commits last monthcomponents/Checkout.tsx
  • MEDIUMThree copies of the same date helperlib/date.ts · utils/format.ts
PULL REQUEST #214fix(stripe): verify webhook signatures
gracebotcommented 2 min ago

Anyone can POST a fake “payment succeeded” to this route today. I check the signature with your existing secret and reject the rest. Nothing else changes.

const body = await req.text();
-const event = JSON.parse(body);
+const sig = req.headers.get("stripe-signature");
+const event = stripe.webhooks.constructEvent(
+ body, sig, env.STRIPE_WEBHOOK_SECRET);
Tests 48/48 before · 48/48 after2 files touchedReversible
Grace Approved

GRACE GUARDS THE AGENTS AND THE STACK YOU ALREADY SHIP WITH

  • GitHub
  • Claude Code
  • Cursor
  • Codex
  • Sentry
  • Vercel
  • Supabase
  • Lovable
  • Bolt

[ Meet the crew ]

Grace leads.
The specialists are called in.

Each change goes to the agent who knows that part of your app. Grace coordinates them, remembers what was decided, and is the only one who signs off. You always see who is working, and why.

  • ProductFrames the change
  • Lead devDecides how to build it
  • SecurityAuth, secrets, access
  • GraceLeads, remembers, signs off
  • DataModels and migrations
  • QATests before and after
  • AuditorRanks what breaks first
01Guard
Led by Grace + Security

Your agents, kept on course.

Grace runs inside Claude Code and Cursor. It challenges your agent's plan before a line is written, reminds it what your team already decided, and checks every edit before it is committed. Anything that brings an old bug back is blocked.

  • Challenges the plan before your agent starts
  • Recalls your team's decisions while it works
  • Every edit, push and pull request checked
  • Included in every plan, Free too
Grace in your editor
claude — acme-app

> add team invitations

● grace_guard_plan (grace MCP)

🧠 Grace — lead dev: the plan trusts the invite token from the URL. That is the bug fixed in #214. Verify it first.

🧠 Grace — memory: the team decided invites expire after 48 hours. Add it to the plan.

plan updated · 2 steps added

● Edit app/api/invite/route.ts (+18 −0)

● grace_guard_write

🧠 Grace — guardian: token checked before use, tests 212/212. Safe to commit.

✓ Committed feat: team invitations

02See
Led by The Auditor + QA

Know what you're shipping. Prove every fix.

Grace reads the repository itself: the source, the history, who touched what. It ranks what will break first, in plain words. Every fix then comes with a test that fails before and passes after, including the errors Sentry catches in production.

  • Reads code, history and ownership, not HTTP responses
  • Ranked by what breaks first, not by alert count
  • One tested pull request per fix, nothing merged without you
  • Sentry errors turned into tested pull requests
See a sample report
A URL SCANNER SEESGET /200 OKGET /pricing200 OKPOST /api/stripe200 OKTLS, headersA“Looks healthy.”
GRACE READSapp/└ api/stripe/route.ts CRITICALcomponents/└ Checkout.tsx HIGHlib/└ supabase.ts CRITICAL└ date.ts
lib/supabase.ts:7The service key is imported by a client component, so it ships to every browser. A URL scan sees a 200.
FROM SENTRY · TypeError in Checkout.tsxPR #219 fix(checkout): guard empty cartFIXEDtest fails before · passes after · 212/212
03Remember
Led by Lead dev

Every agent starts with your team's context.

Decisions, conventions, fragile areas and failed attempts are saved in your repository, in .grace/memory/. Every new session knows what your team already decided, and every developer and every agent shares the same memory.

  • Committed with your code, owned by your team
  • Read at the start of every session, so agents don't repeat old mistakes
  • Searchable in Grace, per app
How the memory works
ACME-APP / .grace/memory/decisions.md14 entriesconventions.md9 entriesfragile.md6 entriesattempts.md4 entries
decisions.md · 3 Oct

Invitations expire after 48 hours. A longer link was shared in a public channel once; we don't want that again.

gracebotsession start · read by 3 developers and 2 agents

Loaded 33 entries for this session. Invitations, auth and the checkout are covered: start from what the team already decided.

Grace Approved seal

[ What earns the seal ]

Nothing gets the seal by default.

Before Grace signs off on a change, every specialist it touches has to agree. One check fails, no seal, and Grace tells you why in plain words.

  • No secret in code, no route left openAuth checked on every endpoint the change touches✓ checked
  • Tests pass before and afterAnd a test is added when there was none✓ checked
  • It fits how your code is builtConventions, patterns, the decisions your team recorded✓ checked
  • Migrations can be undoneNo column dropped that something still reads✓ checked
  • No old bug comes backEvery past fix is checked again✓ checked
  • You stay the one who mergesThe seal is a recommendation. Your click is the decision✓ checked

[ Why Grace ]

They scan your URL.
Grace reads your repository.

An outside scanner sees what a request returns. It cannot see an unused code path, a secret in a file that never reaches the browser, the history of a module, or why a trade-off was made.

LEAVE IT FRAGILEURL SCANNERS & GENERIC TOOLSGRACE
What it readsNothingYour live URL, from outsideYour repository: code, history, owners
What breaks firstYou find out in productionA long list of unranked alertsRanked before it breaks
The fixesNobody dares touch itRaw suggestions you integrateTested, reversible pull requests
ControlBlack boxAuto-merge or nothingYou approve every change
Next monthSame mess againSame scan againGuarded: fixed stays fixed

Grace doesn't replace the AI that writes your code. It keeps that AI under control.

[ From the people who build and use it ]

Why Grace exists.

Keeping AI-built apps from breaking is the hard part of this job. Grace is that experience turned into a product: a guardian angel for the app you're building with AI.
Loïc GuillebeauFounder, Beyond The Brackets
Grace is awesome, she is working all the time, directing all my agents internally what to work on.
SaaS founderGrace user

[ Pricing ]

Free on one app. $29 per app when you carry more.

Free is the real product, not a teaser: Grace guards your agents from the first session. You pay for what accumulates: more apps, a memory that never resets, and a full record of what Grace checked and fixed.

The real product, on one app

Free

$0

no card, no commitment

  • Grace in Claude and Cursor
  • Health check
  • Risky changes stopped before they land
  • 30-day project memory
  • 5 fix credits a month
Start free
Per app, no tiers

Pro

$29

per app / month · 20 credits per app

  • Everything in Free
  • Memory that never resets
  • Full record of what Grace checked and fixed
  • Weekly health check, white-label report
  • 20 fix credits per app
Start with Pro
A portfolio to carry

Agency

$199

per month · 5 apps, then $15 per app

  • Everything in Pro, across your client portfolio
  • One view of every client app
  • Daily checks, pooled credits, priority support
  • 60 credits, +10 per extra app
Start with Agency
At scale

Enterprise

Custom

past twenty apps

  • Credit allowance sized to your portfolio
  • Number of apps set by contract
  • Daily checks and reports on every app
  • Grace in your editor + white-label on every app
  • Dedicated support and onboarding
Contact sales

A fix is one credit, a heavy one two or three, and the estimate is shown before anything runs. Open the price simulator →

[ Questions ]

Asked before working with Grace.

Anything else: hello@agent-grace.com

Yes, on one app. Grace works in Claude Code and Cursor, stops risky changes before they land, and remembers the last 30 days of your project. No card, no commitment.

[ Your turn ]

Get your first
Grace Approved.

Connect a repo. From the next session, the crew guards every change your agents make. Free on one app, no credit card.