Keys never leave your OS
Provider keys are sealed in the platform credential store, not a dotfile. REX talks to providers straight from your machine — no proxy in the middle.
Local-first AI agent · v0.3.6
The agent that asks first.
REX reads your code, plans the change, calls real tools and shows you every diff before a byte is written. It runs on your machine, speaks to 23 model providers, and stops at every step where a mistake would cost you something.
callingread
Scroll
AnthropicOpenAIGoogle GeminiOpenRouterOllama
LM Studiollama.cppGroqDeepSeekMistralxAI
CerebrasTogether AIFireworksNVIDIA NIMGitHub Models
AnthropicOpenAIGoogle GeminiOpenRouterOllama
LM Studiollama.cppGroqDeepSeekMistralxAI
CerebrasTogether AIFireworksNVIDIA NIMGitHub Models
Live interface
This is REX. Drive it.
Not a video — the real layout, running a scripted session. Pick a task below, watch it plan and call tools, then approve or deny the edit yourself.
@ mention a file · paste an image
idle · ready
ollama: online~/src/api-gateway
Composer
@-mention any file
Type @ to pull a file into context. Paste a screenshot and it goes in as an attachment.
Diffs
Edit before you approve
Every write arrives as a diff you can change first — and every approved write drops a checkpoint.
Palette
Ctrl K for everything
Switch model, session, settings or the browser pane without leaving the keyboard.
Why REX
Built different, on purpose.
Agentic, not chatty
Streaming responses, native tool calling, automatic context compaction and append-only session history. It plans, acts and checks its own work.
Any model, even offline
23 providers — cloud, local and any OpenAI-compatible endpoint. Run Ollama or a local GGUF and REX works with the network cable pulled.
A browser it drives
A real browser view inside the window: navigate, read the accessibility tree, click, type and screenshot — while you watch.
It can use the computer
Screenshot, click and type through native backends on each OS. Never auto-allowed: every desktop action asks, every time.
It remembers your rules
A REX.md at the project root is read into every session, so conventions you explain once survive restarts and model switches.
42tools
23model providers
3OSdesktop targets
0telemetry
Permission gate
A "no" you can't talk it out of.
Every tool call walks the same ladder, top to bottom. The hard safety denylist sits above every rule you can write — no setting, no "always allow", and no persuasive prompt gets underneath it.
SafeEverything asks.
DefaultReads run, writes ask.
AutoFewest prompts. Denylist holds.
01hard safety denylistnot overridable
02session rulesthis session
03project rulesthis project
04global ruleseverywhere
05tool defaultsthe fallback
Get REX
Install it. Point it at real work.
14 days free · no card
Also from rxdsec
Rex Browser — the agent, in a browser
An AI browser for Windows, Linux and Android. The REX agent rides in a side panel — it reads pages, clicks, types and calls APIs while you watch and can take over at any time. Browsing and search are free; the agent uses your rxdsec account.
The agent, built in
Web, browser and HTTP tools with 40+ model providers and thinking effort. Pause and take over mid-task — it never acts behind your back.
Private and protected
Ad and tracker blocking, malware and phishing warnings, automatic HTTPS upgrades and checksum-verified updates. Your data stays on your device.
Every device
Windows, Linux and Android, with one rxdsec account across all of them. Same agent, native on each.
RX
Built by rxdsec
About the builder
A security practitioner who got tired of agents that don't ask.
VAPT, web application testing and AI red teaming by day — REX is the tool built from that work.