Skip to main content

AI Agent Runtime Security Platform — runtime security and behavioral monitoring for agentic AI systems

Project description

AgentWall

Behavior-based runtime security for AI agents.

AgentWall is an SDK-first runtime security platform that sits between AI agents and tools, monitoring actions in real time to detect and prevent unsafe behavior.

Unlike prompt scanners and jailbreak detectors, AgentWall focuses on what agents actually do, not what users say.


Why AgentWall?

Modern AI agents can:

  • Read files
  • Execute tools
  • Access APIs
  • Send emails
  • Interact with external systems

A successful prompt injection often matters only because it changes agent behavior.

AgentWall detects:

  • Goal Hijacking
  • Tool Misuse
  • Scope Expansion
  • Sensitive Resource Access
  • Data Exfiltration
  • Unauthorized Actions
  • Behavioral Drift

How It Works

User Goal
    ↓
AI Agent
    ↓
AgentWall Runtime
    ↓
Tool Execution

Before a tool executes, AgentWall evaluates:

  • Current goal
  • Tool being used
  • Resource being accessed
  • Recent tool history
  • Active policies
  • Risk score

AgentWall may:

  • ALLOW
  • WARN
  • BLOCK

depending on risk and alignment.


Key Features

Runtime Security

Behavior-based protection for AI agents.

Goal Tracking

Automatically infers and tracks goals throughout a session.

Policy Engine

Create custom allow/warn/block rules.

Post-Execution Analysis

Classifies tool outcomes and records security-relevant findings without storing sensitive outputs.

Inspector

Native desktop security console powered by PyWebView.

Launch with:

agentwall inspect

Provider Agnostic

Supports:

  • OpenAI
  • Anthropic
  • Groq
  • DeepSeek
  • Ollama

Framework Integrations

Supports:

  • OpenAI Agents SDK
  • LangChain
  • CrewAI

Installation

pip install agentwall

Quick Start

OpenAI Agents SDK

from agentwall import protect_agent

agent = protect_agent(agent)

result = await Runner.run(
    agent,
    "Build a FastAPI CRUD API"
)

LangChain

from agentwall.integrations import protect_langchain_agent

executor = protect_langchain_agent(executor)

CrewAI

from agentwall.integrations import protect_crewai_crew

crew = protect_crewai_crew(crew)

Inspector

Launch the desktop Inspector:

agentwall inspect

Features:

  • Session Timeline
  • Security Decisions
  • Risk Scores
  • Goal Segments
  • Detector Results
  • Policy Management
  • Provider Configuration
  • Export (JSON/CSV)

CLI

agentwall version
agentwall doctor
agentwall config
agentwall inspect

Security Model

AgentWall focuses on:

  • Runtime behavior
  • Tool usage
  • Resource access
  • Goal alignment

AgentWall does not primarily operate as:

  • Prompt firewall
  • Jailbreak detector
  • Content moderation system

Instead it evaluates the consequences of agent actions.


Supported Storage

Local-only architecture.

Uses:

  • SQLite
  • OS Keyring
  • Local FastAPI backend
  • Local Inspector UI

No cloud dependency required.


Architecture

Goal Tracking
        ↓
Security Engine
        ↓
Policy Evaluation
        ↓
Risk Assessment
        ↓
Optional LLM Evaluation
        ↓
Decision
        ↓
Tool Execution
        ↓
Post-Execution Analysis

Documentation

  • Installation Guide
  • Architecture Guide
  • API Reference
  • Security Guide
  • Testing Guide

See the repository documentation for details.


License

MIT License.


Status

v0.1.0

Production-ready initial release.

Open-source and self-hosted.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

agentwall_security-0.1.0.tar.gz (147.5 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

agentwall_security-0.1.0-py3-none-any.whl (112.8 kB view details)

Uploaded Python 3

File details

Details for the file agentwall_security-0.1.0.tar.gz.

File metadata

  • Download URL: agentwall_security-0.1.0.tar.gz
  • Upload date:
  • Size: 147.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.9

File hashes

Hashes for agentwall_security-0.1.0.tar.gz
Algorithm Hash digest
SHA256 b24cc8aad7037d27b51bb328df498315a746cabc99c7b85916cfca128e9213a8
MD5 0399cd58ead44f7df46411f4f30c2d68
BLAKE2b-256 ca33d6b3e7b77453ac4152488aa3fb777f682acb29dcac45c16ba156a9d57f85

See more details on using hashes here.

File details

Details for the file agentwall_security-0.1.0-py3-none-any.whl.

File metadata

File hashes

Hashes for agentwall_security-0.1.0-py3-none-any.whl
Algorithm Hash digest
SHA256 bab43466f9374898db8c9b7556245942c79cea3e46c3b3f80570553179f07209
MD5 5c61941ca4c2491267eaaddd7f8ad4d9
BLAKE2b-256 7b22b75d68b0fe30fe87de1ea9acd49782627180c15d4b5d638e8ccd1f328825

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page