Warp
Warp is a terminal for running commands, with an AI assistant that can write code and carry out development tasks. It’s made by Warp, based in the United States.
What it is
Warp is designed for software development and technical work. People use it to run commands, work on code and connect to remote computers. It groups each command with its output.
Its AI agents can run commands and read or change files, subject to their permission settings. AI requests send relevant context to online services. Codebase indexing sends code to Warp’s servers to create a searchable representation.
Warp publishes its client source code and security advisories. Its privacy settings deserve attention: free-plan AI use requires telemetry, which can include AI interactions and console input. Paid plans can turn telemetry off.
Who makes it
Warp is a privately held software company founded in 2020 and based in New York. Its legal name is Denver Technologies, Inc.. Its website is warp.dev.
Is it the real one?
Every Mac app carries a signature from the developer who made it. Apple checks who the developer is before handing out the certificate, and macOS refuses to open an app whose signature has been tampered with.
HARD hasn’t yet recorded the signature on a real copy of Warp. Its Mac app shows who signed the copy you have.
Its bundle ID, the name macOS knows it by, is dev.warp.Warp-Stable or dev.warp.Warp-Preview. Download it only from warp.dev, not from an ad or a link someone sends you.
What it connects to
In normal use, Warp talks to these places on the internet. A firewall that asks before apps connect, like the one in HARD’s Mac app, will show them.
| Address | Why |
|---|---|
releases.warp.dev | Update checks and downloads |
app.warp.dev | Account sign-in |
*.googleapis.com | Google Firebase authentication |
What it can see
macOS asks you before an app can use these. You can change them any time in System Settings → Privacy & Security.
| Permission | What it’s for |
|---|---|
| Files and Folders | Lets commands work with protected folders such as Documents, Desktop and Downloads. |
| Local Network | Lets commands connect to nearby devices, including through SSH. |
| Microphone | Optional voice input for dictating commands and questions. |
| App Management |
Security record
Problems with Warp or Warp in the last three years, newest first. Keeping the app up to date covers the ones that were fixed.
| When | What happened | Source |
|---|---|---|
| Warp disclosed a vendor attack that may have exposed agent logs and telemetry for roughly 1% of users, saying it had mitigated the attack while investigation continued. | ↗ | |
| Malicious terminal output could overwrite local files and potentially arrange later command execution; fixed in v0.2026.05.06.15.42.stable_01. | ↗ | |
| Clicking a link in malicious Markdown content could launch an executable file already on the Mac; fixed in v0.2026.05.06.15.42.stable_01. | ↗ | |
| Malicious terminal output could read or replace clipboard contents without separate confirmation; fixed in v0.2026.05.06.15.42.stable_01. | ↗ | |
| Malicious content supplied to the AI agent could make file-search tools run commands without the usual approval; fixed in v0.2026.05.06.15.42.stable_01. | ↗ |
References
- Warp: Logging out and uninstalling docs.warp.dev
- Warp Privacy Policy warp.dev
- Warp company profile linkedin.com
- Warp: Terminal Blocks overview docs.warp.dev
- Warp: Security overview docs.warp.dev
- Warp: Privacy and data control docs.warp.dev
- Warp Downloads warp.dev
- Warp: Updating Warp docs.warp.dev
- Warp: Changelog 2026 docs.warp.dev
- Warp: Troubleshooting Login docs.warp.dev
- Warp: Known issues and workarounds docs.warp.dev
- Warp: Voice input for agents docs.warp.dev
- Clarify why Warp requests macOS App Management permission github.com
- Warp discloses breach exposing AI agent logs, user telemetry data bleepingcomputer.com
- Warp advisory: SSH output can overwrite local files github.com
- Warp advisory: Markdown links may open executable local files github.com
- Warp advisory: Terminal output can access the clipboard github.com
- Warp advisory: Command injection through code-search arguments github.com