What a stranger sees of your app, inside your Claude session.

7IT Guard watches the live site from outside. With the plugin, Claude Code hears about it when the session opens, before every deploy, and after every fix.

Set it up See 7IT Guard

$ claude
7IT Guard · myapp.example · NEEDS A LOOK · 1 open · checked 2026-10-20 08:58 UTC
1. Browser protections are missing
> ship it
Bash: git push origin main
7IT Guard · PROBLEM · myapp.example
1. Public source map
   Fix: Stop serving .map files in production.
> /7it-guard:recheck
Gone since the earlier check (verified fixed from outside): 1

Fig. 1 A session with 7IT Guardsample

The live site, where the work happens.

Three moments.

When the session opens	A short brief of the site 7IT Guard watches for this project: its status, what is open and when it was last checked. A few lines, always the same shape.
Before a deploy or push	Claude Code checks the live site from outside first. When something serious is open, you and Claude see it before the push goes out. It warns; it stops the push only if you ask it to.
After a fix	/7it-guard:recheck checks again and says which earlier findings are gone, which are still open and which are new. A finding counts as fixed only when the live site shows it.

One file in the project.

Set it up.

Install 7IT Guard	In Claude Code, add the marketplace and install the plugin. Needs Node.js 18 or newer. `/plugin marketplace add XLSV777/7it-guard /plugin install 7it-guard@7it-guard`
Add your 7IT key	Run /plugin, open 7it-guard, choose Configure and paste the key. It is kept in your system's secure storage.
Name the site	Add .7it/guard.json to the project root with the site 7IT Guard watches. Without this file the plugin stays quiet. `{ "site": "myapp.example" }`

Without .7it/guard.json the hooks send nothing and print nothing. What they send when it is there: Privacy Policy. Terms.

7IT Guard in the session.

Questions.

Does it read my code or the conversation?

No. The brief and the checks send the site's address and your 7IT key. Your code, your files and the conversation stay on your machine.

Can text from my site end up in the session?

No. The brief is data in a fixed template with 7IT Guard's own words for each problem. Nothing the site sends is passed into the session as text to follow.

Will it stop my deploy?

Not by default. It warns and lets the command go on. Add "block": true to .7it/guard.json if you want it to stop a deploy while something serious is open.

Which tools does it work in?

Claude Code, with the 7IT Guard plugin. Other agents can use the 7IT Guard checks through the hosted MCP server.