The more NEX can do, the more it matters who can talk to it and what it believes. Four layers protect you.
Each one covers a different risk.
NEX checks the Host, the Origin and a secret token on every request, so a website you visit cannot send it commands.
Reading is free. Creating files and sending messages ask every time. Deleting, shutting down and force-closing always ask, with no setting to turn it off.
Web pages, emails and documents are fenced off. Hidden characters are stripped and “ignore previous instructions” tricks are flagged.
Every action is recorded with who, when, what and who approved it. Entries are hash-chained, so edits are detectable.
The permission ladder.
| Level | Examples | Behaviour |
|---|---|---|
| Read | Search, list, check mail, open apps, volume, screenshots | Runs automatically |
| Confirm | Create or move files, send email, WhatsApp, SMS, click and type for you | Asks every time |
| Always ask | Delete files, shutdown, restart, force-close | Asks every time, cannot be switched off |
No assistant is perfectly safe.
Fencing is one layer. Agents have tool limits and anything done after reading outside content must be confirmed.
A program already running as you could read local files. That is why risky actions still ask.
The site follows the same cautious approach as the product.
Only this site’s own scripts run. Inline scripts, plugins and embedding in other sites are blocked.
Browsers are told to use encrypted connections, and content-type sniffing is switched off.
No ad networks, analytics scripts or tracking cookies. Your theme choice is saved on your device only.
Camera, microphone, location and payment access are disabled for this site.
Book a short live demo and bring a real task from your day.