12 projects
bastiongateway
MCP security gateway: an inline proxy that scans tools/list for poisoned tools, enforces a tool allow/deny policy, blocks injected tool results, and logs every call. The runtime-enforcement leg of the bastion family.
bastioncorpus
The shared prompt-injection corpus for the bastion trilogy: one canonical, versioned dataset that agentbastion (prevent), bastionprobe (attack), and bastiontrace (investigate) all pull from.
bastiontrace
Forensics for injected AI agents: read a tool-call trace, locate the prompt injection, and map its blast radius. Investigate side of the bastion trilogy (agentbastion + bastionprobe).
bastionfuse
Kill switch and tripwires for AI agents: honeytokens, decoy files, decoy MCP tools and action budgets trip a sticky fuse that stops the agent, whether or not any detector saw the injection. Claude Code hook + Python library. The CONTAIN leg of the bastion family.
bastionsupply
MCP supply-chain security scanner: detect tool-poisoning, shadowing, hidden unicode, secret solicitation, and rug-pull drift in MCP servers before you install them.
bastionmesh
Runtime security gateway between A2A agents: scans peer replies for prompt injection, catches injected payloads relayed between agents, pins and rewrites agent cards, and caps delegation depth, cycles and fan-out.
agentbastion
A firewall for AI agents: block prompt injection, guard tool calls, redact PII/secrets.
bastionprobe
Pentest for AI agents: fire indirect prompt-injection payloads at your agent and report which land. Offensive twin of agentbastion.
bastionskill
Skill-poisoning scanner: detect malicious bundled code (network egress, secret theft, hook-install persistence, destructive commands) in agent skills before you install them — the code-layer that a plain grepper and a prompt-scanner miss.
bastionmemory
Agent memory-poisoning scanner (OWASP Agentic ASI06): detect injected directives disguised as facts in what an AI agent remembers, and diff memory against a baseline to catch poison that appears over time.
modscan
Scan a codebase, generate everything needed to write plugins and mods for it
monohunter
Find single long-period (mono-)transits in public TESS light curves that periodic pipelines under-find.
