Operator Framework

ThumbGate, deployed and operated for your agents.

ThumbGate is a pre-action firewall for AI coding agents. It runs in the PreToolUse hook and evaluates each proposed tool call before it executes. The Operator Framework is how we install it, configure it for the failures you actually have, and keep it working, for your own agents or your clients'.

✓Checked before it runs: risky tool calls are caught at the hook, before the agent acts. A prompt doesn't do that.
✓Safe defaults: detected secret leaks and ThumbGate self-disable commands are hard-blocked by default.
✓Learns from feedback: repeated, concrete failures become local prevention rules. No model retraining.
✓Local-first: no cloud is required for the enforcement path.
Three ways to work together

Pick the depth of help you need.

Every engagement is scoped by email before work begins. No vague strategy decks. You get configured gates and the evidence that they fire.

Start here

Sprint Diagnostic

$499

One-time. One supported workflow.

  • 60-minute review of one repeated agent failure
  • One configured pre-action gate for that failure
  • One regression test proving the gate fires
  • Rollout and rollback proof within two business days
  • Refunded if the failure can't be reduced to a supported gate
Buy the $499 Diagnostic
Full rollout

Turnkey Setup

$2,500

One-time. Scope confirmed by email before work begins.

  • ThumbGate installed and its PreToolUse hook wired for your agents, verified with npx thumbgate doctor
  • Gates configured for the failure classes you name
  • A decision with you on strict enforcement (warn vs. deny)
  • Regression tests showing your gates fire
  • Handoff notes so your team can add rules after we're done
Buy Turnkey Setup · $2,500
Ongoing

Managed Retainer

$500/mo

Monthly subscription. Scope confirmed by email.

  • New agent incidents turned into prevention rules and gates
  • Rule review so warnings and blocks stay accurate
  • Upgrades to new ThumbGate releases
  • Recurring checks that known-dangerous commands are still caught
  • Email access to the founder
Start the $500/mo Retainer

Prefer to do it yourself? ThumbGate Pro is $19/mo, self-serve. The free local install (npx thumbgate init) stays free.

Get Pro · $19/mo
How it works

Three steps from "it happened again" to enforced.

01

Tell us what went wrong

Email or buy an offer. Name the command, tool call, file, or destination your agent shouldn't touch.

02

We install and configure

We wire ThumbGate's PreToolUse hook and set allow, warn, or deny for your failure classes.

03

Prove it, then keep it current

Regression tests show the gates fire. On the retainer we turn new incidents into new rules.

Agency Partner Program

Build agents for clients? Earn a 30% revenue share.

revenue share on Turnkey Setup and Managed Retainer revenue you bring.

For agencies and freelancers building with n8n, LangGraph, CrewAI, Make, Voiceflow, and similar tools. Your clients' agents take real actions. ThumbGate gives you a pre-action check you can offer alongside the build.

  • Refer: introduce a client by email. We scope, deliver, and support.
  • Resell: package Turnkey Setup or the Managed Retainer into your own proposal.
  • Payouts: 30% of collected Turnkey and Retainer revenue from your clients, paid monthly.
Join the partner program
Questions

FAQ

Teams and solo operators running AI coding agents (Claude Code, Cursor, Codex, Gemini CLI, Amp, Cline, OpenCode, or other MCP agents) who want pre-action checks installed and maintained for them instead of wiring hooks themselves. It is also for agencies that build agent workflows for clients and want a governance layer they can offer.
Only what ThumbGate actually does today: the PreToolUse hook that evaluates a proposed tool call before it executes, default hard-blocks for detected secret leaks and ThumbGate self-disable commands, warn-and-log (or deny in strict mode) for other high-risk classes such as rm -rf and force-push, and local lessons that turn repeated, concrete failures into prevention rules. ThumbGate does not update model weights, and hosted Enterprise features (SSO, hosted audit dashboard, org-wide hosted policy) are not generally available. The exact scope of each engagement is confirmed by email before work starts.
Start with the $499 Sprint Diagnostic if you have one repeated agent failure you can name. Choose the $2,500 Turnkey Setup if you want ThumbGate rolled out across your agent workflows. Add the $500/mo Managed Retainer if you want someone to keep the gates current as new failures show up. If you only want the self-serve tools, Pro is $19/mo.
If the failure cannot be reduced to a supported ThumbGate gate, the Diagnostic is refunded instead of turning into open-ended consulting. Email first if you are unsure.
Partners earn a 30% revenue share on Turnkey Setup and Managed Retainer revenue from clients they bring. Under ThumbGate's partner terms, the share is paid monthly on collected revenue, so you are paid on what the client has actually paid. Email to join and get your referral terms in writing.
Email iganapolsky@gmail.com with a short description of your agents and the failure you want stopped. You will get a reply from Igor Ganapolsky, the founder.

Ready to stop the repeat?

Email iganapolsky@gmail.com with your agent stack and the failure you want blocked. We'll reply with the right offer and a time to start. Or buy the Diagnostic now and we'll schedule by email.

Email iganapolsky@gmail.com