Rigour Labs provides AI Agent Governance — a three-layer protection system with Input DLP (blocks credential leaks with 29 patterns), Quality Gates (deterministic PASS/FAIL on every file write), and Memory Governance (controls what AI agents remember). It works with Claude, Cursor, Cline, Windsurf, and Copilot.

What is AI Agent DLP?

AI Agent DLP (Data Loss Prevention) scans every input to AI coding agents for credentials — AWS keys, API tokens, database URLs, private keys, and more. Rigour's DLP includes 29 patterns, Shannon entropy detection for encoded secrets, and unicode normalization to defeat zero-width character bypasses.

How does Memory Governance work?

Memory Governance blocks AI agents from writing to native memory files like .cursorrules, CLAUDE.md, and .clinerules. All persistence is forced through governed channels with DLP scanning. Skills governance controls agent rules paths separately. Both are configurable via rigour.yml.

Does Rigour send my code to external servers?

No. Rigour is 100% local-first with zero telemetry. Your code never leaves your machine. All DLP scanning, quality gates, and governance enforcement happens locally. Install with: npx @rigour-labs/cli init

Which AI coding agents does Rigour support?

Rigour supports all major AI coding agents: Claude (Claude Code, Claude Desktop), Cursor, Cline, Windsurf, and GitHub Copilot. It integrates via real-time hooks and the Model Context Protocol (MCP). One command sets up DLP, hooks, and governance for all agents.

Terms of Service | Rigour Labs

Name: Rigour CLI
Rating: 5 (50 reviews)
Author: Rigour Labs

1. Agreement to Terms

By accessing or using the services provided by Rigour Labs (“Company”, “we”, “our”, or “us”), including Rigour Bot, Rigour MCP Server, and our website at rigour.run (collectively, the “Services”), you agree to be bound by these Terms of Service (“Terms”).

If you do not agree to these Terms, you may not access or use the Services. If you are using the Services on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

2. Description of Services

Rigour Labs provides code quality analysis tools designed to help development teams maintain high engineering standards. Our Services include:

Rigour Bot: A GitHub App that automatically reviews pull requests for code quality issues, security vulnerabilities, and adherence to best practices.
Rigour MCP Server: A local-first Model Context Protocol server that integrates with AI coding assistants to enforce code quality gates.
Rigour CLI: A command-line tool for running code quality checks locally or in CI/CD pipelines.

3. Account and Access

To use certain features of our Services, you may need to install Rigour Bot on your GitHub repositories. By doing so, you grant us the permissions outlined during the installation process, which include:

Read access to repository code and pull request content
Write access to create check runs and post review comments
Access to repository metadata (names, branches, pull request numbers)

You are responsible for maintaining the security of your GitHub account and any repositories where Rigour Bot is installed. You must promptly notify us of any unauthorized access or security breaches.

4. Acceptable Use

You agree to use the Services only for lawful purposes and in accordance with these Terms. You agree not to:

Use the Services to analyze code that you do not have the right to access or analyze
Attempt to circumvent, disable, or interfere with security features of the Services
Use the Services to transmit malware, viruses, or other malicious code
Reverse engineer, decompile, or disassemble the Services
Use automated means to access the Services in a manner that exceeds reasonable usage
Resell, sublicense, or redistribute the Services without our prior written consent
Use the Services to violate the intellectual property rights of others

5. Intellectual Property

Our Intellectual Property

The Services, including all software, algorithms, documentation, trademarks, and other intellectual property, are owned by Rigour Labs or our licensors. These Terms do not grant you any ownership rights in the Services.

Your Code

You retain all ownership rights to the code you submit for analysis. By using our Services, you grant us a limited, non-exclusive license to access and analyze your code solely for the purpose of providing the Services. We do not claim any ownership of your code, and we do not use your code to train machine learning models or for any purpose other than providing the Services.

Feedback

If you provide us with feedback, suggestions, or ideas about the Services, you grant us a perpetual, irrevocable, worldwide license to use such feedback without restriction or compensation.

6. Service Availability and Support

We strive to maintain high availability of our Services, but we do not guarantee uninterrupted access. The Services may be temporarily unavailable due to maintenance, updates, or factors beyond our control.

Support is provided on a reasonable-efforts basis. We may modify, suspend, or discontinue any part of the Services at any time with or without notice. We will make reasonable efforts to notify users of significant changes.

7. Pricing and Payment

Certain features of the Services may require payment. If you subscribe to a paid plan:

You agree to pay all fees associated with your subscription
Fees are billed in advance on a monthly or annual basis
All fees are non-refundable except as required by law
We may change pricing with 30 days' notice

Free tiers and trial periods may be subject to usage limits and are provided at our discretion.

8. Disclaimer of Warranties

THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY.

We do not warrant that:

The Services will meet your specific requirements
The Services will be uninterrupted, timely, secure, or error-free
The analysis results will be accurate or complete
Any defects in the Services will be corrected

The Services are designed to assist with code review but should not be relied upon as the sole mechanism for ensuring code quality or security. You remain responsible for your own code.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, RIGOUR LABS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICES.

OUR TOTAL LIABILITY FOR ANY CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID US IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) $100 USD.

10. Indemnification

You agree to indemnify, defend, and hold harmless Rigour Labs and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of or related to:

Your use of the Services
Your violation of these Terms
Your violation of any third-party rights
Any code or content you submit through the Services

11. Termination

You may stop using the Services at any time by uninstalling Rigour Bot from your repositories.

We may suspend or terminate your access to the Services at any time, with or without cause, and with or without notice. Reasons for termination may include, but are not limited to:

Violation of these Terms
Conduct that we believe is harmful to other users or the Services
Extended periods of inactivity
Failure to pay applicable fees

Upon termination, your right to use the Services will immediately cease. Sections 5, 8, 9, 10, and 13 shall survive termination.

12. Governing Law and Disputes

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions.

Any disputes arising out of or related to these Terms or the Services shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association. The arbitration shall take place in Delaware, and the decision of the arbitrator shall be final and binding.

Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement of intellectual property rights.

13. General Provisions

Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Rigour Labs regarding the Services and supersede all prior agreements and understandings.

Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

Waiver

Our failure to enforce any right or provision of these Terms shall not be considered a waiver of that right or provision.

Assignment

You may not assign or transfer these Terms or your rights under these Terms without our prior written consent. We may assign these Terms without restriction.

Modifications

We reserve the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on our website or through other reasonable means. Your continued use of the Services after such changes constitutes acceptance of the modified Terms.

14. Contact Information

If you have any questions about these Terms, please contact us:

Email: [email protected]
Website: https://rigour.run