Windback is a flight recorder for AI coding agents. It keeps every file change, shows the prompt behind it, and puts your folder back to any moment, even when the whole folder is deleted.
Runs on your Mac. Nothing is uploaded. We’ll only email you about launch.
You pick the folder your agent works in.Windback takes a baseline snapshot. No account, no config files.
You run your agent as usual.Every create, edit and delete is recorded as it happens, with the diff.
Something looks wrong.Windback notifies you about mass deletes, bulk changes, and sensitive files like .env and SSH keys.
You open it and see what happened, and why.Each change is linked to the prompt and command that caused it.
Restore.The folder goes back to the moment you pick. The restore is recorded too, so you can undo it.
Click a change · open a restore · dismiss an alert
The interactive demo needs a wider screen.
| Reported | Tool | What happened | Source |
|---|---|---|---|
| Nov 2025 | Google Antigravity | Asked to clear a project cache, the agent reportedly ran a delete that wiped the developer’s entire D: drive. | TechRadar |
| Dec 2025 | Claude Code | A command with a stray ~/ reportedly deleted a Mac user’s home directory. | Gigazine |
| Ongoing | Cursor | Many forum threads describe agents deleting folders and drives, such as “Cursor Agent Completely Wiped My C: Drive and Deleted Everything”. | Cursor forum |
Commands an agent runs in a terminal skip the Trash, your editor’s undo, and the agent’s own checkpoints. Git only helps for what you committed. These are user reports, not verified incident counts. The pattern is the point: the agent is fast, and recovery is on you.
Every create, edit and delete in the folder, with line-by-line diffs.
Each change is linked to the Claude Code prompt and command behind it.
Roll the folder back to any moment. The restore is recorded, so it can be undone.
Mass deletes, bulk changes and sensitive files raise a notification with a one-click restore.
Decoy credentials that alert you if anything edits them or copies them elsewhere.
Snapshots live outside your project, or on an external drive, so deleting the folder doesn’t delete the history.
Flags AWS keys, private keys and common API tokens the moment they appear in a file.
Planned pricing. Not final until launch.
Recording works with anything, because Windback watches files rather than hooking into a tool. The prompt-level cause currently reads Claude Code sessions. More agents are planned.
No. Snapshots, history and alerts stay on your machine. There is no account and no cloud.
It only protects folders you’re recording. The default backup location is on your Mac’s own disk, so a whole-disk wipe would take it too. Point it at an external drive for that. Canary files detect edits and copies, not reads. Files over 5 MB are skipped.
Not yet. Early access will be a direct download.
Mac first. Windows is planned, and the early-access list will hear about it first.