📄️ Prompt Injection
Detects and neutralizes attempts to hijack your AI agent's instructions.
📄️ System Prompt Leakage
Prevents your agent's instructions from being extracted or leaked.
📄️ Tool Gate
Controls which tools your AI agent can use and monitors for suspicious usage patterns.
📄️ Filesystem Fence
Restricts file access to authorized areas and protects sensitive files.
📄️ Credential Vault
Detects and redacts API keys, passwords, tokens, and personal information in conversations.
📄️ Escalation Detection
Detects commands that attempt to gain elevated system access or escape containers.
📄️ Input Validator
Enforces message size limits and rate limiting to prevent abuse.
📄️ Output Scanner
Scans AI-generated responses for dangerous code patterns and security vulnerabilities.
📄️ Memory Guard
Protects against poisoned memories and enforces session size limits.
📄️ MCP Hardening
Controls which external tool servers your agent can connect to and inspects their responses.
📄️ Network Policy
Controls where your agent can make network requests and blocks access to internal resources.
📄️ Skill Verification
Ensures agent skills are authentic and haven't been tampered with.
📄️ Config Tamper Detection
Monitors critical files for unauthorized changes, deletions, or unexpected additions.
📄️ Auth Enforcement
Ensures all messages come from authorized channels and verified users.
📄️ Audit & Alerts
Complete security event logging with configurable retention and real-time alert delivery.
📄️ Anomaly Detection
Notices when an agent starts behaving unusually compared to its own normal pattern.
📄️ Exemption Engine
Lets you tell CrabShield about specific, known-safe behavior so it stops flagging it.
📄️ Policy Compliance
Checks your own CrabShield settings for gaps, so protection isn't weakened by accident.
📄️ RAG Scanner
Scans documents you upload to your Knowledge Base for hidden manipulation attempts before they reach your agents.