Product news
MCP Shield: the OpenWAF edge now reads MCP, tool calls and tool results included
Put the OpenWAF edge in front of your own MCP server. It checks which methods and tools are called, inspects tool arguments and tool results for prompt injection and leaked credentials, limits requests per token, and starts in log mode.
OpenWAF Egress: an open-source gateway that keeps provider keys out of your AI agents
We open-sourced the gateway we put between AI agents and model providers. Agents keep a placeholder token; the real key is injected from OpenBao or Vault only after the request passes 27 prompt-injection detectors, data-leak patterns and an SSRF check.