Pipelock

Pipelock is an open-source firewall for AI agents. It runs as a single Go binary between an agent and the network, scans outbound HTTP and MCP traffic for secret exfiltration, prompt injection, and SSRF, and blocks at the boundary before anything leaves. Every allow or block decision is written as a signed receipt you verify yourself, offline, against a published key. There's a live browser challenge where you run a real agent against a real attack, plus a public attack corpus so you can measure any agent firewall against real techniques. Apache 2.0, self-hosted.