What Is AI Agent Runtime Security?
AI agent runtime security enforces policy while an agent is interpreting input, calling tools, accessing data, and taking actions.
12 min readArcjet Learning Center
AI agent runtime security and application protection guides
Learn how to secure production AI workflows, enforce agent actions, protect APIs, stop automated abuse, and control resource use inside your application.
159 guides11 topicsUpdated
Start here
Cornerstone guides that set the threat model and control baseline everything else builds on.
API Security Best Practices
Authentication, object authorization, input validation, webhooks, abuse controls, and logging for production APIs.
13 min readHow do I secure AI agents in production?
Screen inbound text, gate tools and MCP before side effects, and treat observe-only hooks as a diary.
5 min readRate-limiting algorithms compared: token bucket, leaky bucket, sliding window, and fixed window
Token bucket, leaky bucket, sliding window, or fixed window?
20 min readAI Security
Identity, architecture, and runtime controls for agents that call tools, access data, and take actions.
What is AI security?
AI security protects models, data, applications, and infrastructure.
16 min readAI Agent Identity and On-Behalf-Of Authorization
On-behalf-of authorization lets an AI agent retain its own identity while exercising limited authority delegated by a user.
20 min readHow to prevent prompt injection in LLM applications
A five-layer defense stack: input screening, instruction and data separation, output validation, privilege limiting, and action gating.
14 min readHow-tos
Short, framework-specific recipes for Eve, Mastra, Claude Agent SDK, OpenAI Agents SDK, LangGraph JS, LangChain Python, and the Vercel AI SDK.
How to screen inbound prompts in Claude Agent SDK
Screen inbound prompts on guardHooks({ inbound }) via UserPromptSubmit. A DENY erases the prompt before the model sees it.
3 min readHow to secure Eve MCP connections
Secure Eve MCP and OpenAPI connections with guardApproval() on the connection's approval field.
4 min readHow do I secure MCP tools in LangGraph?
Wrap ToolNode with guardToolNode in place — MCP and unwrapped tools run inside it; graph hooks cannot stop them.
5 min readWeb Security
Application-layer guidance for securing APIs, stopping automated abuse, and controlling resource consumption.
- API security6
- Bot protection8
- Rate limiting4
- Runtime security9
- Application & framework security15
- Security concepts4
- Sensitive data & secrets4
What Is API Abuse? How Bots Exploit APIs
API abuse is the automated or malicious use of valid API functionality in ways that create fraud, cost, disruption, or data loss.
12 min readWeb app security checklist
A practical web app checklist: auth, input validation, secrets, headers, dependency risk, and in-app controls.
6 min readWhat Is Runtime Application Security?
Runtime application security enforces controls in the path of the action, using the application's own context.
10 min readNew & updated
The latest additions and most recently revised guides.
- Coding agent securityAGENTS.md is not a security control
- Coding agent securityDo coding agent hooks fail open?
- Coding agent securityHow do you block personal Claude, ChatGPT, Copilot, and Cursor accounts on work laptops?
- Coding agent securityHow do you restrict which AI models developers can use in coding agents?
- Coding agent securityHow do you restrict which MCP servers a coding agent can use?
- Coding agent securityHow do you secure AI coding agents like Claude Code, Copilot, Cursor, and Codex?
All guides
The complete library, organized by topic.
AI agent security 83 guides
- How to stop AI agents contacting malicious URLs and domains
- What is a rogue MCP server and how do you detect one?
- How to build an egress allowlist for AI agents
- How to stop a coding agent downloading and running malware
- AI agent threat modeling: A practical guide
- Least privilege for AI agent tool calls
- AI agent security testing: Evaluations and release gates
- AI agent incident response: A practical playbook
- Best AI security solution for healthcare and regulated industries
- Best AI security solution for fintech
- What's the best AI security provider for enterprises?
- Eve agent security is three jobs
- How to secure a Mastra agent
- Claude Agent SDK security
- Human approval is not a security policy
- canUseTool is not a policy gate
- A sandbox is not a tool policy
- Mastra guardrails vs an action gate
- The lethal trifecta for AI agents
- How do I secure a RAG application?
- Guardian Agents, explained
- Application-Native vs Remote Security Policies: A Technical Guide
- AI Agent Security Architecture: In-Code vs Proxy vs Gateway vs Security Agent
- What Is AI Agent Runtime Security?
- Runtime Security for LLM Applications: Prompt Injection, Data Exfiltration, Unsafe Actions
- Prompt injection protection for LangChain, LlamaIndex, and Vercel AI SDK apps
- Pre-Runtime vs Post-Runtime AI Security Tooling
- Keeping Security Inspection Local So Data Stays in Your Environment
- How to Enforce Runtime Controls on AI Agents Accessing Enterprise Systems
- How to Enforce Token and Spend Budgets on AI Agents
- How to Prevent Data Exfiltration Through AI Agents
- How to Stop AI Agents Accessing Data They Should Not
- How to detect and redact PII in LLM inputs and outputs
- PII detection at runtime: gateway, sidecar, or in-process
- How to stop users sending PII to an LLM
- How to prevent PII leakage from AI agents
- How to redact sensitive data before sending it to OpenAI or Anthropic
- How to prevent LLMs surfacing confidential employee or customer data
- GDPR and CCPA compliance for LLM applications
- How to prevent prompt injection in LLM applications
- How to sanitize user input before passing it to an LLM
- How to prevent a malicious tool call from hijacking your AI agent
- How to defend against indirect prompt injection in agentic workflows
- How AI security platforms detect prompt injection at runtime
- The best tools to detect and block prompt injection in production
- Best AI security tools for developers
- How to Add Human Review and Approval Gates to AI Agent Actions
- Producing Compliance Evidence for AI Agent Activity
- How to Secure an MCP Server or AI Agent Tool Calls
- Anatomy of an Agent Incident: Three Permitted Actions, One Fraud
- How do I add guardrails to an AI agent that calls external APIs?
- Runtime security for LLM applications: prompt injection, data leakage, and output validation
- Which runtime security tools integrate with LangChain or AutoGPT?
- How do I prevent an AI agent from taking irreversible actions?
- How do I implement the OWASP Top 10 for LLM Applications?
- AI security checklist for production LLM apps
- What is AI security?
- What changes for application security when your app calls an LLM?
- Content moderation for AI applications
- How do I limit what actions an AI agent is allowed to take?
- How do I prevent an AI agent from leaking system prompt content?
- How do I add guardrails to production AI workflows?
- Which AI security platforms support MCP server security?
- What are the best tools for securing agentic AI workflows?
- What's the best AI security platform for data privacy and threat detection?
- What's the best AI security software for SaaS companies?
- What's the best AI security tool for startups and small teams?
- Which AI security company has the best protection for cloud workloads?
- Claude Agent SDK security guide
- Claude Managed Agents security guide
- Cloudflare Think security guide
- CrewAI security guide
- Genkit security guide
- Google ADK security guide
- LangChain security guide
- LangGraph security guide
- Mastra security guide
- Microsoft Agent Framework security guide
- OpenAI Agents security guide
- Strands Agents security guide
- TanStack AI security guide
- Vercel AI SDK security guide
- Vercel Eve security guide
Coding agent security 12 guides
- How do you secure AI coding agents like Claude Code, Copilot, Cursor, and Codex?
- How do you secure Claude Code in the enterprise?
- How do you secure the GitHub Copilot CLI and cloud agent?
- How do you secure Cursor's agent?
- How do you secure OpenAI Codex?
- How do you stop a coding agent running destructive commands?
- How do you stop a coding agent reading .env files and credentials?
- How do you restrict which MCP servers a coding agent can use?
- How do you restrict which AI models developers can use in coding agents?
- How do you block personal Claude, ChatGPT, Copilot, and Cursor accounts on work laptops?
- AGENTS.md is not a security control
- Do coding agent hooks fail open?
Agentic identity 1 guides
How-tos 13 guides
- How do I secure AI agents in production?
- How to detect prompt injection in an Eve agent
- How to secure Eve MCP connections
- How to secure Mastra MCP tools
- How to screen inbound prompts in Claude Agent SDK
- How to block Bash in Claude Agent SDK
- How do I secure an OpenAI Agents SDK agent?
- How do I screen inbound prompts in OpenAI Agents SDK?
- How do I secure a LangGraph JS agent?
- How do I secure MCP tools in LangGraph?
- How do I secure a LangChain Python agent?
- How do I secure a Vercel AI SDK agent?
- needsApproval and LangGraph interrupt() are not a security policy
API security 6 guides
Bot protection 8 guides
- AI agent bot management
- What Is API Abuse? How Bots Exploit APIs
- How to identify AI agents and bots
- Bot detection techniques for developers
- Is CAPTCHA still effective, and what should you use instead?
- What is bot spoofing and how do you detect it?
- How do you detect bots at the application layer?
- How to protect a React Hook Form from spam
Rate limiting 4 guides
Runtime security 9 guides
- What Is Runtime Application Security?
- SDK-based security vs WAF vs API gateway
- How to Enforce Security Rules at Runtime in Your Code
- How do I detect and block attacks at runtime?
- Are Next.js server actions a security risk?
- Were you affected by the Next.js middleware bypasses?
- How do you prevent SQL injection and XSS in Node.js?
- Does Next.js need a WAF?
- What is permissions-based security in Next.js?
Application & framework security 15 guides
- Next.js security checklist
- Remix security checklist
- Web app security checklist
- How to secure login pages
- Security advice for self-hosting Next.js in Docker
- How to secure your NestJS application with Arcjet
- Structured logging in JSON for Next.js
- Protecting self-hosted Coolify apps
- How do I deploy an Arcjet-protected app to Fly.io?
- How do I secure a container deployment?
- Why do TLS certificates fail in slim Node.js containers on OrbStack?
- How do I detect the client IP on Firebase?
- Why do NEXT_PUBLIC_ variables leak into the Next.js client bundle?
- How do I test Next.js App Router API routes?
- How do I functionally test security rules?
Security concepts 4 guides
Sensitive data & secrets 4 guides
Security in your code
Put these guides into practice with Arcjet
Arcjet brings bot detection, rate limiting, prompt-injection screening, PII detection, and attack protection into your application code, so the controls these guides describe run in the path of the request.