Pipelock Guides

AI Agent Security Guides, Standards, and MCP Security

Agent security concepts explained.

Start with Claude Code Agent Firewall Guide

109 guides

Selected routes

Three practical entry points

Featured IDE Setup Claude Code Hooks Install Pipelock hooks for Claude Code in one command. Scans Bash, WebFetch, Write, Edit, and MCP tool calls for credential leaks and injection. intro claude-codehooks Featured Operator Learn-and-Lock Learn-and-lock turns observed AI agent traffic into signed Pipelock contracts, then tests them in shadow mode before enforcement. deep learn-and-lockcontracts Featured MCP Security MCP Security MCP security guide to risks, best practices, OWASP controls, tool poisoning, secret leaks, SSRF, runtime defenses, and audit. deep mcpowasp

Guide directory

Browse by subject

109 guides in the directory

8 guides

IDE Setup

Put Pipelock between your coding agent and the network.

IDE Setup Claude Code Security deep claude-codesecurity IDE Setup Continue.dev MCP Security intro continue.devmcp IDE Setup Zed MCP Security intro zedmcp IDE Setup Claude Code Secret Exfiltration deep claude-codeexfiltration IDE Setup JetBrains MCP Security intro jetbrainsjunie IDE Setup VS Code MCP Security intro vscodemcp IDE Setup Claude Code Hooks intro claude-codehooks IDE Setup Cursor AI Security intro cursorsetup

13 guides

MCP Security

Inspect tool calls, responses, and server behavior before they reach the agent.

MCP Security MCP Runtime Security deep mcpruntime MCP Security MCP Vulnerability Scanner deep mcpsecurity MCP Security Skill Supply Chain Security deep skillssupply-chain MCP Security What Is MCP? intro mcpexplainer MCP Security MCP Authorization deep mcpoauth MCP Security Shadow MCP deep mcpshadow-it MCP Security MCP Gateway: Open Source Security Comparison ref mcpgateway MCP Security MCP Security Tools ref mcptools MCP Security MCP Proxy ref mcpproxy MCP Security MCP Tool Poisoning Defense deep mcptool-poisoning MCP Security MCP Vulnerabilities deep mcpssrf MCP Security MCP Server Security deep mcptutorial MCP Security MCP Security deep mcpowasp

4 guides

Prompt Injection

See how hostile instructions enter agent workflows and where to stop them.

Prompt Injection Chatbot Security intro chatbotexplainer Prompt Injection LLM Prompt Injection intro injectionllm Prompt Injection Prompt Injection Detection deep injectiondetection Prompt Injection Prompt Injection Prevention deep injectionnormalization

17 guides

Compliance

Map agent activity to controls, records, and audit requirements.

Compliance HIPAA Security Rule ref hipaacompliance Compliance MITRE ATLAS Coverage ref mitre-atlascompliance Compliance NIST AI RMF Coverage ref nist-ai-rmfcompliance Compliance SOC 2 Criteria Mapping ref soc-2compliance Compliance AI Agent Regulatory Controls ref evidenceregulatory Compliance Compliance Evidence Substrate ref evidenceeu-ai-act Compliance Agent Evidence Integration deep evidencesiem Compliance Mythos-Ready Playbook deep playbookcsa Compliance OWASP MCP Top 10 ref owaspmcp Compliance AI Agent Compliance deep compliancesoc2 Compliance AI Compliance Evidence ref evidenceframeworks Compliance OWASP AIVSS Coverage ref owaspaivss Compliance SlowMist Coverage ref slowmistmcp Compliance OWASP Agentic AI Threats: Coverage ref owaspagentic Compliance OWASP Agentic Top 10: Coverage ref owaspagentic Compliance OWASP LLM Top 10: Coverage ref owaspllm Compliance EU AI Act Compliance deep eu-ai-actcompliance

8 guides

Evidence

Create and verify records of what the agent tried to do.

Evidence Coverage Certificates intermediate coveragereceipts Evidence Agent Evidence Level aelevidence Evidence AARP Claims Dictionary ref receiptsassurance Evidence AARP Spec ref receiptsassurance Evidence AARP: Proves / Does Not ref receiptsassurance Evidence Agent Action Receipts intro receiptsevidence Evidence Verifiable Egress Control intro vecevidence Evidence Verify Agent Actions intro evidencereceipts

33 guides

Operator

Run, tune, and troubleshoot Pipelock in real environments.

Operator Contain an AI Agent on Linux intermediate containmentlinux Operator Pi Security intro pisetup Operator Grok Build Security intro groksetup Operator Kill Switch intro kill-switchenforcement Operator Agent SIEM Logging intermediate siemlogging Operator Operator Console intro dashboardoperator Operator Progressive Enforcement deep progressive-enforcementlearn-and-lock Operator Hermes Integration intro integrationhermes Operator Request Policy intro request-policyegress Operator Pro Reference Deployment deep prodeployment Operator Verify a Receipt intro receiptsed25519 Operator Pipelock v2.5 Upgrade ref releaseupgrade Operator Audit Packet Threat Model ref audit-packetthreat-model Operator Browser Shield intro browser-shieldresponse-rewriting Operator License Setup intro licenseinstall Operator Agent Egress Control intro github-actionci Operator Block Reason Headers ref block-reasonhttp-headers Operator Health Watchdog ref healthliveness Operator Learn-and-Lock deep learn-and-lockcontracts Operator Pipelock v2.4 Upgrade ref releaseupgrade Operator Self-Hosted Sure + Pipelock deep surehelm Operator AI Agent Data Redaction deep dlpredaction Operator Pipelock v2.3 Upgrade ref releaseupgrade Operator SSE Streaming Response Scanning deep ssestreaming Operator Mediation Envelope deep signingrfc9421 Operator Pipelock K8s Companion Proxy deep kubernetesproxy Operator Pipelock Posture Verify ref postureci Operator Pipelock Session Recovery ref sessionsrecovery Operator Pipelock v2.2 Upgrade ref releaseupgrade Operator Action Receipt Spec ref receiptsed25519 Operator Canary Tokens intro canarydetection Operator Flight Recorder ref audithash-chain Operator Pipelock Detection Rules intro ruleshot-reload

1 guide

Comparison

Check Pipelock against adjacent tools and different security models.

Comparison Agent Security Control Layers intro comparisonarchitecture

25 guides

Concepts

Build the mental model before changing the deployment.

Concepts Pipelock v3.6 Upgrade Guide ref upgradev3.6 Concepts Denial of Wallet deep denial-of-walletcost-control Concepts Pipelock v3.3 Upgrade Guide ref upgradev3.3 Concepts Egress vs. Inbound Agent Firewall intro egressagent-firewall Concepts Agent Firewall vs Guardrails vs Sandbox deep agent-firewallconcepts Concepts Known Limitations ref limitationsevidence Concepts What Pipelock Claims and Doesn't deep evidenceagent-firewall Concepts Redaction Placeholders intro redactiondlp Concepts Agent Security Tool Profiles intro procurementreceipts Concepts Pipelock Performance deep performancebenchmark Concepts Cloudflare AI Gateway deep cloudflareai-gateway Concepts AI Agent Security Categories deep agent-securityai-agent-security Concepts Preventing SSRF in AI Agents deep ssrfegress Concepts LLM Security deep llmthreats Concepts AI Agent Data Loss Prevention deep dlppatterns Concepts AI Runtime Security deep runtimethreats Concepts Generative AI Firewall ref firewallvendors Concepts Cloudflare Sandboxes + Pipelock deep cloudflaresandboxes Concepts Agent Security Best Practices intro best-practiceschecklist Concepts Agent Security Tools ref toolscomparison Concepts AI Egress Proxy intro proxyegress Concepts Open Source AI Firewall intro firewallopen-source Concepts Secure Agent Deployment deep deploymentthreat-modeling Concepts AI Agent Security intro agent-securitylayers Concepts Agent Egress Security deep egresscredentials

Ready to protect your own setup?

Install Pipelock Inspect the proof
See Assess reports →