Korveo – a local firewall for AI agents
Local firewall blocks agent credential leaks before they leave your machine.

Blocks credential leaks in agent output, not just dangerous input commands.
Developers using AI coding agents, DevSecOps engineers
Lakera Guard · Guardrails AI · Rebuff
Local firewall blocks agent credential leaks before they leave your machine.
Agent firewall with 16+ injection patterns, sandboxed skill scanning, detects real OpenClaw CVE exposure.
Prevents `rm -rf ~` from your hallucinating agent in two commands, works with any CLI tool.
Deterministic policy gates beat LLM guardrails when your agent tries to DROP TABLE.
This feels like the first serious attempt to treat agent-to-agent chatter as a network security problem: 16+ prompt-injection signatures (with recursive base64 decoding), AST static analysis of skills via acorn/estree, and sandboxed dynamic checks are concrete, non-trivial defenses. The repo shows real engineering (Docker, CI, security scans, 181 tests) — the missing piece is real-world performance and adoption, but if you run agent fleets this is worth poking at.
Two-command setup blocks prompt-injected shell commands before they execute, not after.