Ship the agent. Don't ship the attack path with it.
The moment your agent has tools, credentials, and untrusted context, it's an attack path, a poisoned document or tool result can steer it into leaking secrets or running the wrong command. Crawdad protects it at runtime with one environment variable and no code changes, records the attacks it sees, stops secrets from leaving, and stays out of the way of normal work.
Observe mode by default: records everything, stops secrets from leaving, freezes an agent that goes out of bounds, and blocks nothing else. If it goes down, your agent keeps working.
Build and ship agents without creating a new attack path.
You want to move fast and not become the reason your company's credentials leaked through an agent. Crawdad is the guardrail that doesn't slow you down: it runs in Observe mode by default, and if it ever goes down, your agent keeps working.
One env var, no SDK, no code changes
Point your agent's base URL at Crawdad; its traffic flows through with no change to how you build.
Doesn't get in your way
Normal developer work, reading your files, running your commands, flows through. When Crawdad stops a secret or freezes an agent, you get a plain-language reason and a one-click way to allow it if it's fine.
Sees the real attacks
Prompt injection, indirect injection in tool results and retrieved content, credential and data exfiltration, and staged multi-step attacks. At Observe, the default, it stops secrets from leaving and records the rest; blocking comes with Enforce.
Credentials the agent can't leak
The real key lives in a store the agent never touches. Works across Anthropic, OpenAI, Google, xAI, and NVIDIA.
What Crawdad is, and what it doesn't replace
Crawdad is runtime protection for the agent's actions. It doesn't replace least privilege, secrets management, or tool-side authorization, it's the layer that governs what your agent does when hostile content inevitably reaches it. And the benchmark is public, so you can check what it catches.
See it on your own agents in a demo. Already a customer? Sign in.