Security3 min read
Pipelock: Open-Source AI Agent Firewall Released With 11-Layer Scanning Pipeline
Tags Security · AI · Open source · OSS
Help Net Security · GitHub·

Pipelock, an open-source (Apache 2.0) AI agent firewall developed by Joshua Waldrep under the PipeLab project, shipped version 2.3.0 with class-preserving request redaction and generic SSE streaming response scanning. The tool acts as an agent egress proxy with an 11-layer scanner pipeline covering SSRF, DLP (48 credential patterns with checksum validation), prompt injection (25 detection patterns with 6 normalization passes), and more. It supports Claude Code, Cursor, VS Code, JetBrains, OpenAI Agents SDK, Google ADK, AutoGen, CrewAI, and LangGraph. The system fails closed on timeouts and errors. The project has 350+ GitHub stars and ships as an ~18MB single binary with 21 dependencies.