AI Agent Runtime Security Platform — runtime security and behavioral monitoring for agentic AI systems
Project description
AgentWall
Behavior-based runtime security for AI agents.
AgentWall is an SDK-first runtime security platform that sits between AI agents and tools, monitoring actions in real time to detect and prevent unsafe behavior.
Unlike prompt scanners and jailbreak detectors, AgentWall focuses on what agents actually do, not what users say.
Why AgentWall?
Modern AI agents can:
- Read files
- Execute tools
- Access APIs
- Send emails
- Interact with external systems
A successful prompt injection often matters only because it changes agent behavior.
AgentWall detects:
- Goal Hijacking
- Tool Misuse
- Scope Expansion
- Sensitive Resource Access
- Data Exfiltration
- Unauthorized Actions
- Behavioral Drift
How It Works
User Goal
↓
AI Agent
↓
AgentWall Runtime
↓
Tool Execution
Before a tool executes, AgentWall evaluates:
- Current goal
- Tool being used
- Resource being accessed
- Recent tool history
- Active policies
- Risk score
AgentWall may:
- ALLOW
- WARN
- BLOCK
depending on risk and alignment.
Key Features
Runtime Security
Behavior-based protection for AI agents.
Goal Tracking
Automatically infers and tracks goals throughout a session.
Policy Engine
Create custom allow/warn/block rules.
Post-Execution Analysis
Classifies tool outcomes and records security-relevant findings without storing sensitive outputs.
Inspector
Native desktop security console powered by PyWebView.
Launch with:
agentwall inspect
Provider Agnostic
Supports:
- OpenAI
- Anthropic
- Groq
- DeepSeek
- Ollama
Framework Integrations
Supports:
- OpenAI Agents SDK
- LangChain
- CrewAI
Installation
pip install agentwall-security
Quick Start
OpenAI Agents SDK
from agentwall import protect_agent
agent = protect_agent(agent)
result = await Runner.run(
agent,
"Build a FastAPI CRUD API"
)
LangChain
from agentwall.integrations import protect_langchain_agent
executor = protect_langchain_agent(executor)
CrewAI
from agentwall.integrations import protect_crewai_crew
crew = protect_crewai_crew(crew)
Inspector
Launch the desktop Inspector:
agentwall inspect
Features:
- Session Timeline
- Security Decisions
- Risk Scores
- Goal Segments
- Detector Results
- Policy Management
- Provider Configuration
- Export (JSON/CSV)
CLI
agentwall version
agentwall doctor
agentwall config
agentwall inspect
Security Model
AgentWall focuses on:
- Runtime behavior
- Tool usage
- Resource access
- Goal alignment
AgentWall does not primarily operate as:
- Prompt firewall
- Jailbreak detector
- Content moderation system
Instead it evaluates the consequences of agent actions.
Supported Storage
Local-only architecture.
Uses:
- SQLite
- OS Keyring
- Local FastAPI backend
- Local Inspector UI
No cloud dependency required.
Architecture
Goal Tracking
↓
Security Engine
↓
Policy Evaluation
↓
Risk Assessment
↓
Optional LLM Evaluation
↓
Decision
↓
Tool Execution
↓
Post-Execution Analysis
Documentation
- Installation Guide
- Architecture Guide
- API Reference
- Security Guide
- Testing Guide
See the repository documentation for details.
License
MIT License.
Status
v0.1.0
Production-ready initial release.
Open-source and self-hosted.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file agentwall_security-0.1.1.tar.gz.
File metadata
- Download URL: agentwall_security-0.1.1.tar.gz
- Upload date:
- Size: 147.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
f85d268c8ef1f91e9b2279590454c0fffd1fbd48ba063d5cbcb644564adceeb0
|
|
| MD5 |
9ab997c0c98effd4b8caff6c493376f5
|
|
| BLAKE2b-256 |
a3f6ef7cb1ba72348a493bcd081e5b71254c74390afc8da5f0d53f9de3bace39
|
File details
Details for the file agentwall_security-0.1.1-py3-none-any.whl.
File metadata
- Download URL: agentwall_security-0.1.1-py3-none-any.whl
- Upload date:
- Size: 112.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.9
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
ca3bfc21d4bf3fe107715561ffb8615d4e19772e62d2e015cb03c409b167ff44
|
|
| MD5 |
47ab3aaa8ae88b9b0abab4758d1de406
|
|
| BLAKE2b-256 |
4b3ab3babf2b7acf96f07b3cfb57fcf81fad312c86f24b2ba5621618b8a70706
|