Comments
>log in to comment- Zain Sheikh· 3mo ago
Putting a firewall between agents and the network is smart, but being able to actually prove nothing leaked is the part most agent setups skip.
Pipelock is a single Go binary that sits between your agents and the network and scans every request for secret exfiltration, prompt injection, SSRF, and MCP tool poisoning. When it blocks something, it writes a signed receipt you verify yourself, offline, against a published key. No account, no phoning home.
Apache 2.0. Run the live challenge in your browser: point a real agent at a real attack and watch it get blocked.
brew install luckyPipewrench/tap/pipelockPipelock is an open-source firewall that mediates AI agent traffic, scans for leaks and attacks, and provides signed, offline-verifiable receipts.
- for
- Developers and ops teams running AI coding agents who need egress protection and auditability.
- pricing
- freemium · free trial
- license
- Apache-2.0
Key features
- Fixed-order scanner pipeline — Detects secret leaks, prompt injection, SSRF and tool poisoning using 65 DLP patterns.
- Kill-switch enforcement — Six independent sources can instantly block traffic with fail-closed behavior.
- Process sandboxing — Uses Landlock, seccomp (Linux) and sandbox-exec (macOS) to contain agent processes.
- Signed receipts — Generates Ed25519-signed decision logs that can be verified offline.
- Multi-profile coordination — Pro tier adds unlimited named security profiles with separate policies and budgets.
- Observability integrations — Exports 85+ Prometheus metrics and supports OTLP, Grafana, Splunk, etc.
Use cases
- Block secret exfiltration from a Claude Code agent during debugging
- Prevent prompt-injection attacks on a custom MCP tool
- Enforce per-agent egress policies in a Kubernetes deployment
- Generate auditable evidence for compliance audits
Pipelock pricing
- Community$0Full scanner engine · One default security profile · No credit card required
- Founding Pro$49/mo/monthUnlimited named profiles · Per-profile DLP and budgets · Audit trails and Prometheus labels
- Founding Pro Annual$490/yr/yearSave $98 vs monthly · Same Pro features · Flat-rate unlimited agents
- Enterprise$25,000/yearFleet governance · Signed policy distribution · M-of-N emergency kill
Pipelock vs alternatives
 Pipelock |  Fine |  Pocketenv |  Calljmp |  Syrin - Static Contract Analysis for MCP Servers | |
|---|---|---|---|---|---|
| Best for | Agent egress firewall with verifiable receipts | Agent security firewall | Agent egress protection | Managed agent hosting | Runtime agent firewall |
| Pricing | Freemium | Free | Free | Free | Free |
| DevHunt upvotes | 4 | 75 | 73 | 35 | 24 |
| Launched | Jul 2026 | Jan 2023 | Apr 2026 | Feb 2026 | Feb 2026 |
- Pipelock vs Fine: Fine focuses on building AI agents, while Pipelock secures agent egress and provides audit receipts.
- Pipelock vs Pocketenv: Pocketenv provides sandbox runtimes for agents, whereas Pipelock is a network firewall with signed evidence.
- Pipelock vs Calljmp: Calljmp offers managed backend for agents, but does not include offline-verifiable firewalling.
- Pipelock vs Syrin - Static Contract Analysis for MCP Servers: Syrin scans MCP servers for static issues; Pipelock actively blocks malicious traffic at runtime.
Pipelock FAQ
Is there a trial for Pro features?+
Yes, a 30-day Pro trial is available with no credit card and no automatic conversion.
Do licenses phone home?+
No. License verification is fully offline using Ed25519 signatures.
Can a license be used on multiple machines?+
Yes, licenses are not bound to hardware and can be deployed on any number of machines.
What happens when a paid license expires?+
The system falls back to the free Community tier; protection remains active but coordination features are disabled.
What does the Assess license provide?+
It adds a full, signed security assessment report (HTML/JSON/SARIF) with detailed framework mappings for OWASP, NIST AI RMF, EU AI Act and SOC 2.
Summarized by DevHunt from pipelab.org · Sep 28, 2026. Details may change; check the official site.
