🛡️ correctover-runtime-guard
Real-time RCE/SSRF/Env Leak interception — P50 ≈ 2011µs (local measurement, 2026-08-22).
Quick Start
pip install correctover-runtime-guard
correctover-runtime-guard start
What It Does
Runtime guardrail for AI Agent tool calls — intercepts before execution:
- RCE interception (CWE-78) — command injection in tool arguments
- SSRF blocking (CWE-918) — metadata endpoint access, internal port scanning
- Env leak prevention (CWE-200) —
AWS_SECRET_ACCESS_KEY,OPENAI_API_KEYexfiltration - MCP Server mode —
diagnose_error/get_fault_pattern/get_repair_suggestion
Performance
Local measurement on a single host (2026-08-22). Indicative only, not a vendor benchmark.
| Metric | Value |
|---|---|
| P50 latency | ≈2011µs |
| P99 latency | not benchmarked |
| Overhead | not benchmarked |
| Detection rate | qualitative — real-time RCE/SSRF/Env-leak blocking |
Evidence
Backed by CCS fault taxonomy v2.5 (verified 2026-08-22):
- 5 verified PoCs · 3 CVEs referenced
- CVE-2026-42271 → LiteLLM (CVSS 8.8, verified)
- CVE-2026-25536 → MCP TypeScript SDK race condition (CVSS 7.1, verified)
- CVE-2026-12957 → AWS Language Servers (CVSS 7.8, verified via NVD 2026-08-22)
Free Tier
50 interceptions/day — no credit card required.
Enterprise: ¥1,999/month — correctover.com/checkout
export CORRECTOVER_LICENSE_KEY=your-key-here
Related Correctover Tools
| Tool | Install | Description |
|---|---|---|
| Security Scanner | npx correctover-scan |
MCP config security audit（checks 数未核实） |
| Self-Healing Test | pip install correctover-test |
Agent self-healing test suite（3 scenarios × 3 frameworks） |
| Vulnerability Scan | pip install correctover-security-audit |
32 detection rules (CCS v2.5) |
| Compliance Check | pip install correctover-compliance-check |
OAuth 2.1 + CCS v1.0 (18 checks) |
| Runtime Guard | pip install correctover-runtime-guard |
RCE/SSRF interception (P50 ≈ 2011µs local measurement) |
| MCP Server | npm install correctover-mcp-server |
Compatibility package（已退役，转发至 correctover-mcp-gateway） |
Website: correctover.com · GitHub: github.com/Correctover
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file correctover_runtime_guard-2.1.2.tar.gz.
File metadata
- Download URL: correctover_runtime_guard-2.1.2.tar.gz
- Upload date:
- Size: 14.6 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
69d7332d3f5325d0d5109850ad812d160f543418756ed1b9171df9375a7f3b0c
|
|
| MD5 |
5b5a498fc63a719a37eac82d049843f5
|
|
| BLAKE2b-256 |
4cd9a1a785bb4f637401f2c6720d13f5910b40475596e817d112808524efe8ad
|
File details
Details for the file correctover_runtime_guard-2.1.2-py3-none-any.whl.
File metadata
- Download URL: correctover_runtime_guard-2.1.2-py3-none-any.whl
- Upload date:
- Size: 17.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.8
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
1d8a56186d1469dc9db44510046eec65cdc07ddb20b335fc31d134f1d467ca33
|
|
| MD5 |
0ac411f7c4491c2699512f3c0ff86b9c
|
|
| BLAKE2b-256 |
5203b815b9b57e0c84a522dddccc119d5523de432aa3df9e32969701fa938fc3
|
