Arcjet is the runtime security platform that ships in your AI code. Detect prompt injection, authorize agent tool calls, redact sensitive data, and block bots and abuse. Real-time security building blocks you call inside your app, before an action happens.
Their new agent runtime security platform is a must-have for engineering teams to enforce policy the moment an AI agent acts, and keep the evidence to prove what happened and why. Detect prompt injection, authorize agent tool calls, block bots and abuse. It's available now.
Start for free with this prompt or follow the quickstart to protect your first agent tool and LLM calls:
1. Run: npx skills add arcjet/skills
2. Add Arcjet protection to my app
Curious to know what the community thinks about security these days.
Report
Is that focused on end users abusing the agent or on agents themselves getting tricked into abusive loops?
@simonclark55 Both, but the focus is broader than just end-user abuse.
Arcjet is designed to secure the agent at runtime, so if an end user or external content tricks the agent into taking an unsafe action, Arcjet can detect and block it at the action boundary. That includes indirect prompt injection coming through things like emails, web pages, or tool outputs.
And for the agent itself, Arcjet can enforce rate limits and quotas across the run, so a runaway or abusive loop can’t just keep calling tools and burning through resources.
The key is that we’re looking at the sequence of actions, not just whether an individual request looks suspicious.
Report
Congrats on the launch! How out-of-the-box is the implementation and later use?
@denis_prodan Pretty out-of-the-box. You can add Arcjet to an existing app with a small SDK integration, and it starts observing what’s happening without requiring you to deploy or rebuild your agents. From there, you can layer in policies as needed (prompt injection, sensitive data, rate limits, tool/API actions, etc.) and move from observe to enforce when you’re ready.
When AI was just a chatbot, the worst thing it could do was be wrong. That's no longer where the risk sits. Agents now read and write to databases, resolve support tickets and move money, and they are set off by an inbox, a text message or a code commit rather than someone typing into a chat box.
Today, we're announcing Agent Runtime Security. It gives engineering teams enforcement at the moment an agent acts, and it gives security teams the evidence to prove afterwards what happened and why. It's available now with a 15-day free trial: https://arcjet.com/
Over to you! Ask us anything, challenge us, tell us what you think about security in this AI era. We're here all day.
So happy to see this go live, and delighted to be part of the launch. The team have put in a serious body of work over the last few months to get here.
Governing agents at the code level is something most companies still aren't doing, and it's exactly where the real risk sits.
As David put it: "The code is where the context is, so you can make security decisions at machine speed."
Let's go!
Report
Does it add much latency when you check for prompt injection before every action?
Mastra
absolute fan of @davidmytton's work with @Console and @Arcjet.
Their new agent runtime security platform is a must-have for engineering teams to enforce policy the moment an AI agent acts, and keep the evidence to prove what happened and why. Detect prompt injection, authorize agent tool calls, block bots and abuse. It's available now.
Start for free with this prompt or follow the quickstart to protect your first agent tool and LLM calls:
Curious to know what the community thinks about security these days.
Is that focused on end users abusing the agent or on agents themselves getting tricked into abusive loops?
Arcjet
Congrats on the launch! How out-of-the-box is the implementation and later use?
Arcjet
Arcjet
Hey Product Hunt, Cassie here from @Arcjet!
When AI was just a chatbot, the worst thing it could do was be wrong. That's no longer where the risk sits. Agents now read and write to databases, resolve support tickets and move money, and they are set off by an inbox, a text message or a code commit rather than someone typing into a chat box.
Today, we're announcing Agent Runtime Security. It gives engineering teams enforcement at the moment an agent acts, and it gives security teams the evidence to prove afterwards what happened and why. It's available now with a 15-day free trial: https://arcjet.com/
Over to you! Ask us anything, challenge us, tell us what you think about security in this AI era. We're here all day.
The GTM Co-Founder
So happy to see this go live, and delighted to be part of the launch. The team have put in a serious body of work over the last few months to get here.
Governing agents at the code level is something most companies still aren't doing, and it's exactly where the real risk sits.
As David put it: "The code is where the context is, so you can make security decisions at machine speed."
Let's go!
Does it add much latency when you check for prompt injection before every action?