Skip to main content

Security Getting Started

CrabShield comes pre-installed with CrabShack and is active out of the box. This page walks you through what's already protecting your agents and how to start customizing.

What's Already On​

On a fresh CrabShack installation, all 18 security guards are enabled with sensible defaults:

  • Prompt Injection is in sanitize mode — it cleans up manipulation attempts without blocking conversations
  • System Prompt Leakage and Tool Gate are in block mode — zero tolerance for the most serious threats
  • Escalation Detection and Output Scanner are in warn mode — they log suspicious activity so you can review it
  • All other guards are enabled with their default protections

This means your agents are protected immediately. You don't need to configure anything to get started.

Checking Your Security Status​

Open the CrabShack dashboard and navigate to Security in the sidebar. You'll see:

  • The status of all 18 guards (enabled/disabled, current mode)
  • Recent security events
  • A summary of what CrabShield has caught

Your First Customization​

A common first change is switching Prompt Injection from Sanitize to Block for stricter protection:

  1. Open the CrabShack dashboard
  2. Navigate to Security > Guards
  3. Click Prompt Injection
  4. Change the mode from Sanitize to Block
  5. Save — the change takes effect automatically

Testing It Out​

Try sending a message through your agent that looks like a manipulation attempt. Then check Security > Audit Log in the dashboard. You should see an event showing what CrabShield detected and what action it took.

What's Next​

  • Configuration — learn about modes, exemptions, and how to tune your security settings
  • Guards — detailed guides for each of the 18 guards