egress-proxy

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

Egress-only, zero-dependency agent to plug private data sources into Weve.

Multi-tenant Kubernetes operator for self-hosted GitHub Actions runners. Scale-to-zero workers, per-tenant egress IP pools, and GPU priority scheduling across a shared ResourceQuota — an Actions Runner Controller (ARC) alternative.

airtap

Portable runtime policy and audit layer for AI agents - HTTP/HTTPS proxy enforcing egress policies, inspecting content, materializing secrets, and recording every decision.

Educational PoC demonstrating network isolation for Node.js apps using Docker internal networks and nginx as an egress proxy gateway.

FinTrack_App - This application is designed to demonstrate and visualize Kubernetes Ingress (Inbound Routing) and Egress (Outbound Network Security via NetworkPolicies) in a local or production Kubernetes cluster.

Auditing egress proxy for AI agent deployments. Sits between agent and internet, intercepts HTTPS via mitmproxy, enforces an explicit allowlist, and logs every request to a tamper-resistant volume outside the agent. Comes with a built-in log viewer and live allowlist management.

Agent-specific network egress guardrail. Wraps untrusted LLM agent runtimes so they can't exfiltrate data or hold real secrets — the only route out is a default-deny proxy that swaps placeholder tokens for real secrets at the edge.

Provider-neutral DLP scanning and egress-enforcement runtime