Empower your people
One surface to find and do everything across every system. Most everyday answers resolve on-device, at zero tokens.
A new category of enterprise software
The AI SuperAgent for work. Without the breach.
Give your workforce one governed, auditable surface to find and act on everything across every disconnected system, without your data ever leaving the boundary you control.
On this page
The crux
The whole idea, in three words
The search surface
One box · every source
Zero cognitive load · zero over-exposure
Recognize & act · zero prefix
Paste anything, really anything
Beyond text
Instant tools · on-device
Built for flow
Bring your stack to Bolt
Secrets & vaults
Governance & policy
Privacy by architecture
The catalog system
Under the search surface
The governed conductor
Security & compliance
Deployment
What changes
Built for your industry
Security operations & threat intel
Financial services & banking
Healthcare & life sciences
IT & engineering
Legal & compliance
Government & public sector
The complete reference · 1 of 2
The complete reference · 2 of 2
Bolt today
New: the governed browser
The ask · Empower · Govern · Audit
The crux
Your people work across a dozen systems and a browser full of tabs. Bolt is one SuperAgent that reaches them all: it finds what you can access, recognizes what's in front of you, acts in a keystroke, and reaches for a model last, so the work gets done and the data stays yours.
The whole idea, in three words
Empower. Govern. Audit.
The three things an enterprise actually needs from AI at work, in one SuperAgent, not three products.
Govern every action
One decision point controls what runs, what's revealed, and what ever reaches a model: by role, department and group.
Audit anything
Agent turns, tool calls, approvals and identity transitions in a tamper-evident trail you can verify offline: adoption you can defend to regulators and the board.
The search surface
Vaguely remember it? That's enough.
Half a file name. A person you met once. A thread from last quarter. Type the fragment and Bolt finds it. Across your local machine, your network drives and the cloud you signed into with your own company identity. It surfaces what you have, or what your role is allowed to see. Location stops mattering.
One box · every source
Everything you can reach, in one result list.
Emails
threads & attachments
Contacts & people
directory & org graph
Cloud drives
via your OIDC / SSO
Local & network files
this machine & remote
Tasks
open, blocked, due
Calendars
meetings & attendees
Clipboard history
text & images, OCR'd
Browser tabs
open & recent
AI sessions
past conversations
Apps
installed & web
Recent searches
pick up where you left
…every system you connect
lights up automatically
Zero cognitive load · zero over-exposure
It shows what you can see, and nothing you can't.
You never think about permissions. Bolt enforces every source's own access rules inside the search itself, so the same query returns different results for different people, and never even hints at what someone isn't cleared to see.
One sign-in
Your company identity (OIDC / SSO) carries through to every connected store and system.
Permission-native
Access is enforced inside the query, not applied after results return. There's nothing to leak.
Need-to-know
Titles, summaries and tags are filtered too, so restricted items are simply invisible.
Recognize & act · zero prefix
Paste anything. Bolt knows what it is, and what to do.
Drop in a value and Bolt identifies it, validates the checksum, masks it if sensitive, and offers the right next action. 2,000+ shapes recognized out of the box.
Identifiers
cards, IBAN, ISIN, LEI, tax & national IDs · validated & masked
Finance & crypto
FX rates, wallet addresses with conversion
Secrets
150+ API-key prefixes flagged & kept from the model
Security / IOC
CVE, CVSS, IPs, hashes, JWTs, ATT&CK
Geo & time
country, currency, airport, coords, phone, time zones
Web & code
URLs, emails, GitHub/Jira refs, JSON, regex, Base64
Network & dev
MAC, CIDR, ASN, semver, git-sha
Your formats
org identifiers & internal codes via signed packs
Paste anything, really anything
A value, a list, a link, a path, a command, a picture.
Bolt reads whatever lands in the box, one value or a thousand lines, works out what it is, and offers the next step. No format to choose, no mode to set.
A single value
identified, validated, masked if sensitive
Many lines
sort, dedupe, count, extract emails/URLs/IPs
A URL
open, summarize, decode, pull apart
A file path
open or reveal across local & network drives
A command
explain it, run it, decode an encoded one
Structured data
JSON, a log line, a stack trace · format & extract
An image
OCR the text, read a QR, recognize what's inside
A secret
flagged, masked, kept from the model
Beyond text
Paste a picture. Bolt reads it.
Screenshots, photos, scans, QR codes: Bolt pulls the text and meaning out of images and turns it into something you can search, copy and act on.
Paste an image → OCR
Extract the text, then recognize what's inside it. An IBAN in a photo is still an IBAN.
Searchable clipboard
Image clips are OCR'd, so you can find them later by the words inside them.
QR, both ways
Decode a code from any pasted image, or generate a fresh one, entirely on-device.
Instant tools · on-device
90 built-in tools, zero latency.
Type = for the full catalog, or just type the verb. Everything that can run locally, does: instant, offline, nothing leaves.
Convert, transform, generate
calc, units, FX, time zones, color, JSON, base64, case, regex, UUID, QR.
Security & validators
CVE, ATT&CK, JWT, hashid, defang, secret-scan, and =valid for IBAN/card/ISIN.
Finance & clinical packs
MRR, tax, fiscal, NPV, IRR, XIRR, CAGR, EMI, YTM, plus clinical units.
Built for flow
One global shortcut. Then everything flows.
Sigils, one keystroke deep
= tools · / scope a source · @ attach context ·; snippets ·: watches ·? discover.
Honest results
Instant rows compute on-device; suggested rows wait for Enter before any network call.
AI when you choose it
An explicit "Try with AI" step, and on-device masking has already tokenized the sensitive parts.
Bring your stack to Bolt
Your tools. Your integrations. Your rules.
Bolt connects to whatever you already run, and every connection is governed. Turn any REST / OpenAPI endpoint into a uniform, policy-gated action.
Admin-provisioned & blessed
IT publishes a catalog of approved integrations with central auth and policy. Power without the risk.
User-defined personal
People connect their own tools with per-user OAuth: scoped to them, never a shared key, revocable.
Proprietary & 3rd-party
Wrap in-house APIs and niche vendor apps as first-class governed actions: no SDK, just declare the endpoints.
Secrets & vaults
Search your secrets like everything else, safely.
Connect personal and corporate vaults and find any credential by name from the same box, without app-hopping, and without ever exposing plaintext.
One search, every vault
Bolt's own vault, 1Password, Bitwarden, Apple Keychain, Windows Credentials, HashiCorp Vault and the AWS, Azure and GCP secret managers. Together.
Reveal to clipboard only
Plaintext never enters Bolt's memory or reaches a model, and auto-clears after use.
Governed reveal
Exposing a corporate secret is a role-gated capability, and every reveal is audited.
Governance & policy
One policy engine over every capability.
Access control is unified into a single capability registry and decision point. Admins decide who can do what, by role, department and group, across every surface.
Capability registry
Every governable action carries a risk tier and a fail-mode: fail-open or fail-closed, per capability.
Per-role / dept / group lockdown
Restrict terminal, files, clipboard, web, model choice, integrations and secret reveal.
Kill switches
Cut any capability instantly, firm-wide. Even proactive AI suggestions have an admin off-switch.
Policy lifecycle & dry-run
Version, schedule effective dates, compare and revert. Preview a change with the simulator before it ships.
Privacy by architecture
Sensitive data is masked before the model sees it.
Shadow AI today
Fast, and ungoverned
- Real names, cards and keys reach the model
- Data leaves the device and never comes back
- No policy: anyone, anything, anytime
- No audit when you're asked to prove it
With Bolt
Just as fast, fully governed
- PII tokenized on-device before any model sees it
- Tool results masked before they enter chat history
- Credentials encrypted at rest: plaintext never crosses out
- Restored only in the answer shown to you: every restoration audited
The catalog system
Recognition that scales from universal to your industry.
Universal
50+ public identifiers, code tables and entity cards, on by default.
Auto light-up
Recognizers switch on when you connect a matching system.
Vertical packs
Built-in packs for healthcare, security and finance, legal, supply chain, inside the signed app.
Proprietary
Your own signed catalog of internal codes: recognition only, contained.
Under the search surface
A retrieval engine that can't over-share.
Permission-native retrieval bakes access into every query, preserves each source's real permission model, and ranks with keyword and entity-overlap scoring.
Source-fidelity permissions
ACL pre-filtering runs inside the query, so each source's own permission model is preserved rather than flattened for the content you index.
Typed entity catalog + graph
Custom entity kinds and relationships connected across every source.
Hybrid ranking
Keyword and entity-overlap signals fused with reranking, degrading gracefully under load.
The governed conductor
Conduct AI agents. Don't lose control of them.
Bolt orchestrates local and remote AI agents through the same policy engine, with identity and audit at every step.
Policy at the tool boundary
Every agent tool-call passes the decision point; sub-agents inherit scope; each allow/deny is audited.
Authenticated runs
Bearer auth on agent runs and completions; identity headers flow to every downstream system.
Verifiable identity
Remote agents present signed agent cards with published keys, aligned to open standards.
Security & compliance
Provable, portable, deployable anywhere.
Tamper-evident audit + offline proof
Merkle-sealed, signed events, exported as a bundle an auditor verifies without trusting us or your network.
Data residency & air-gap
Self-hosted, private cloud or on-prem; runs with zero outbound calls. No Sparcle server in the path.
GDPR readiness
Per-subject export and erasure (DSAR) with a receipt, and per-organization crypto-shred. SSRF and exfiltration guards built in.
Bring your own stack + SSO
SIEM (Splunk, Sentinel), metrics and tracing via your tools; SSO with Workspace, Microsoft 365, Zoho.
Deployment
Deploys inside your perimeter.
No Sparcle server sits in the path. You run it where your data already lives, on the models you already trust.
Inside your perimeter
Self-hosted on AWS, Azure, GCP, on-prem, or fully air-gapped. Identity flows through your existing IdP; data stays in your network.
Bring your own LLM
OpenAI, Anthropic, Bedrock, Vertex, Ollama, NVIDIA NIM, or your own fine-tuned model. Hot-swappable, and with BYOK there's zero token markup.
Free client, governed server
Put the SuperAgent in every hand for free. The governed server is the part your security team signs off on, and the part you don't skip.
What changes
The numbers your board cares about.
40+
tools per knowledge worker
the tab graveyard Bolt collapses into one box
29
compliance packs in the box
jurisdiction and industry packs you turn on per deployment
0
outbound calls, air-gap tier
no telemetry, no third-party model APIs
Any
LLM · yours
switch model, vendor or deployment without touching the agent layer
Built for your industry
Everything your team needs, tuned to your world.
The same surface, search engine and governance, shaped by industry packs so each team gets exactly the recognizers, data and actions it works with every day.
Security
Financial services
Banking
Healthcare
IT & engineering
Legal
Government
Security operations & threat intel
Pivot across every indicator, without leaving a trace outside.
Always-on threat-intel
IOCs and MITRE ATT&CK recognized on sight; defang/refang, PEM and secret-scan built in.
One-paste enrichment
IP / hash / domain enriched across SIEM, EDR and TI feeds, then mapped to the technique.
Governed AI triage
Automated, audited and entirely inside your boundary. The team investigating breaches won't cause one.
Financial services & banking
Analyst speed on regulated data, every step auditable.
Instant validation
IBAN, ISIN, CUSIP, LEI, ABA, SWIFT and wallet addresses, validated and masked on sight.
Finance toolkit
NPV, IRR, XIRR, CAGR, EMI, YTM, day-count and MRR/ARR: inline, no spreadsheet, no data leaving.
Segregation of duties
Per-role lockdown and instant kill switches; customer data masked before any AI step.
Healthcare & life sciences
PHI never becomes the leak.
On-device PHI masking
Protected data is tokenized locally before anything crosses the AI boundary.
Clinical recognition
NPI, NDC and ICD-10 validated locally (validator ships; your org wires the coded data).
Role-gated search & tools
Clinical, scheduling and admin systems honored by role; dosing and unit math on-device.
IT & engineering
Stay in flow. Keep the crown jewels in-house.
Dev recognition
git-sha, semver, CVE/CVSS, IPs, CIDR, JWT and packages, recognized and opened.
CLI & vault federation
Already-authenticated gh, aws and kubectl, plus 1Password and Vault, governed per subcommand.
No IP sprawl
Any internal API becomes a governed action; source and secrets never reach an external model.
Legal & compliance
Privilege enforced, not just promised.
Privilege at the search layer
Privileged matters are visible only to the cleared team: access-native, not a policy memo.
Masking before the model
Privileged and personal data is tokenized on-device; reveal and export are role-gated and audited.
Faster review
Summarize-with-masking and entity-to-context in a keystroke; firm-wide kill switch for holds.
Government & public sector
Modern search & AI, deployable where it couldn't be before.
Air-gap deployable
Runs with zero outbound calls; citizen data never leaves the boundary.
Clearance-aware search
Strict need-to-know enforced in-query; restricted records are simply invisible.
Defensible by design
Per-role lockdown, tamper-evident audit and portable proof auditors verify offline.
The complete reference · 1 of 2
Every sigil, every tool, every scope.
-
Sigils 6
= tools / scopes @ context ; snippets : watches ? discover
-
Scopes 15
/all /email /meeting /task /file /person /chat /discover /ai /apps /browse /clips /tabs /timer /recent
-
Convert & transform
=calc =fx =unit =tz =date =color =json =base64 =url =case =slug =sort =uniq =regex =match =extract
-
Security
=cve =attack =jwt =hash =hashid =pem =secret =defang =refang =psdec =valid
-
Generate & look up
=uuid =pw =qr =map =weather =ip =def =ask =http =chmod =cron =git
-
Finance & clinical
=mrr =tax =fy =bps =emi =cagr =npv =irr =xirr =ytm =daycount =clinical-units =sla
The complete reference · 2 of 2
2,000+ shapes recognized out of the box.
-
Checksum IDs
credit-card IBAN ISIN CUSIP SEDOL LEI ABA ISBN EAN/UPC VIN IMEI NPI ORCID DOI
-
National & tax IDs
SSN/EIN/ITIN UK NINO/NHS IN PAN/GSTIN/Aadhaar BR CPF/CNPJ FR SIREN/SIRET DE Steuer-ID EU VAT ×29
-
Crypto & network
Bitcoin Ethereum Cosmos Cardano Tron IPv4/6 CIDR MAC ASN
-
Code, hash & time
UUID semver git-sha MD5/SHA JWT Base64 unix-ts ISO-8601 coords plus-code
-
Security & tables
CVE CVSS GHSA ATT&CK HTTP status MIME ICD-10 country currency airport
-
Secrets 150+ prefixes
Stripe ×27 AWS ×33 GitHub/GitLab Slack AI keys ×16 GCP npm/pypi PEM & tokens
Bolt today
Free for individuals. Governed for the org.
The free build is the full desktop app, not a trial. The paid tiers add central control over that same app rather than extra capability on the endpoint.
New: the governed browser
The browser Bolt ships, and the check on the way out
Most AI exposure happens in a browser tab. Bolt ships its own, so what a person types or pastes into a page is screened on the machine before it is allowed to leave it.
A normal browser
Sees the paste, says nothing
- A customer list reaches the AI site intact
- The extension is the only control, and only where it is installed
- No record of what was sent, or why
- Every AI-enabled extension holds its own permissions
Bolt's browser
Names it, holds it, records it
- What was found, grouped by type with a count, without repeating the values back
- The page is held while the person decides, and a written reason is required to proceed
- The reason lands in the audit record as a durable incident, not a counter
- The tab says Guarded only when the guard reported, and Not screened when it cannot
The ask · Empower · Govern · Audit
Give your people the SuperAgent. Keep the control.
One trusted surface to find and do everything across every system: governed, auditable, and entirely inside the boundary you control. See it on your own data.
One
box, every source
On-device
recognition & masking first
Air-gap
deployable, offline-verifiable
Every other seat
Same platform, argued from where you sit
Each role page makes the case in that role's own language, and links back here.
See it on your own data
Bolt runs inside your perimeter, on the LLM you choose.