Back to directory

DefenseClaw

A security-governance layer for OpenClaw and other agentic AI runtimes that scans capabilities before use, inspects runtime traffic, and exports durable audit evidence.

Visit website (opens in a new tab)cisco-ai-defense.github.io
DefenseClaw

DefenseClaw is a security-governance system for agentic AI runtimes such as OpenClaw, combining a Python operator CLI, a Go gateway, connector hooks, policy definitions, scanners and observability exporters into one enforcement and evidence layer. It scans a capability before it is used, inspects traffic at runtime, and exports durable audit evidence, though the project states plainly that it does not itself prove an agent or third-party capability is free of risk.

Its documentation website is the canonical source for installation, configuration, CLI reference, connector compatibility and guardrail setup; the repository's own markdown is limited to contributor guidance and internal design records. Building from source requires Python 3.10 to 3.13 and Go 1.26.4, with a make build target that produces checkout artifacts without changing an already-installed system.

More in AI evals

See all 269
  • Provenance gate

    github.com

    A deterministic authorization gateway that sits between an AI agent and its tools, tracing where each parameter of a side-effect call came from, and blocking the call or asking a human when the source does not check out.

  • JevBench

    benchmarkheaven.com

    A reproducible benchmark from Benchmark Heaven that ranks Jev-class typed decision models on intelligence, calibration, speed, and cost, with a published harness, scoring rules, and results.

  • A co-evolutionary adversarial red-teaming tool for AI agents that uses quality-diversity evolutionary search to autonomously breed edge-case scenarios, testing whether an agent with tool access can be made to hallucinate, deadlock or leak funds.