Your guardrails are advisory. The firewall makes them enforced.
A guardrail config pasted into your agent’s prompt is a request. A prompt-injected agent — or one that simply misreads a number — can ignore it. The Agent Firewall sits between your agent and your broker and enforces your policy on every single tool call, no matter what the agent believes.
Open source. Runs on your machine. Your agent never touches your credentials again.
How it works
Broker credentials move out of the agent and into the firewall on your machine. The agent only sees the firewall's policy-bounded tool surface — there is no second path to your account.
Per-trade and daily caps, ticker allowlists, trading hours, a frequency circuit breaker — checked deterministically on every tool call. Out of policy? Blocked, no matter how convinced the agent is.
If the firewall crashes, orders fail — your agent stops trading. The failure mode is never "trades unguarded." Every attempt, allowed or blocked, lands in a tamper-evident audit log.
The policy format is the same one the free Agent Safety Kit generates today — you’ve already written your firewall rules; this makes them unbreakable.
Free where it can be. Paid where it has to be.
The enforcement engine is open source and free forever — you should never have to pay to be safe on your own machine. Pro is the hosted layer that physically requires servers: $12/mo or $99/yr.
| Feature | Free (open source) | Pro |
|---|---|---|
| Policy enforcement — caps, allowlists, hours, circuit breaker | ✓ | ✓ |
| Approval gate for large orders | Terminal prompt | Approve from your phone |
| Kill switch | Local command | Remote, from anywhere |
| Audit log | Local file | Hosted dashboard, 90-day history |
| Real-time alerts (push / SMS / email) | — | ✓ |
| Anomaly flags & weekly digest | — | ✓ |
| Multi-agent / multi-account | — | ✓ |
Join the waitlist — lock $79/yr for life
The first 200 waitlist members who upgrade at beta get Pro for $79/yr, locked forever (vs. $99/yr after). One email when the beta opens — that’s it.