CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production
Summary
Brex open-sources CrabTrap, an LLM-as-a-judge HTTP proxy that filters and secures AI agent traffic before it reaches production services.
View Cached Full Text
Cached at: 04/22/26, 01:59 AM
CrabTrap: Secure Agents in Production
Source: https://www.brex.com/crabtrap Brex LLC is a wholly owned subsidiary of Capital One, N.A.
Brex LLC | 650 S 500W Suite 300 | Salt Lake City, UT 84101
The Brex business account consists of Checking, a commercial checking account provided by Column N.A., MemberFDIC(an unaffiliated institution), and Treasury and Vault, cash management services provided by Brex Treasury LLC, MemberFINRA/SIPCand a Capital One company.
Securities are offered through Brex Treasury LLC. Funds in Treasury are not FDIC-insured. Funds in Vault atprogram banksare eligible forFDICinsurance. Funds are not FDIC-insured until they arrive at program banks. Conditions apply.
Investing in securities involves risk and loss of money. Yield and return are variable and fluctuate. Past performance is not a guarantee of future results. This is not an offer to, or implied offer, or a solicitation to, buy or sell any securities. Brex Treasury LLC does not provide legal, tax, or investment advice. The latest statement of financial condition for Brex Treasury LLC is availablehere. You could lose money by investing in the Fund. Although the Fund seeks to preserve the value of your investment at $1.00 per share, it cannot guarantee it will do so. An investment in the Fund is not insured or guaranteed by the FDIC or any other government agency.
The Brex Mastercard® Corporate Credit Card is issued by Emigrant Bank, Fifth Third Bank N.A., or Airwallex (Netherlands) B.V. (all unaffiliated institutions), pursuant to licenses by Mastercard International Inc. Mastercard is a registered trademark, and the circles design is a trademark of Mastercard International Inc. The Brex Commercial Card is issued by Sutton Bank (an unaffiliated institution), pursuant to a license from Visa® U.S.A. Inc. Can be used where Visa® cards are accepted. No ATM access. All loans are subject to approval, including underwriting, credit, and collateral approval, as well as availability restrictions. Nothing herein should be construed as a commitment to lend.
Certain payment services are provided by Brex Payments LLC, alicensed money transmitter(NMLS #2035354) and a Capital One company.
Some Brex products have associated fees. Plans start at $0 per user, per month, and more advanced features are available for $12 per user, per month.
Similar Articles
Claw Patrol: an open-source security firewall for agents
Deno open-sources Claw Patrol, a security firewall for AI agents that routes traffic through a tunnel, parses protocols, injects credentials, and enforces rules to prevent dangerous actions like SQL deletions or kubectl commands.
Proxy for LLMs to learn how Agents works?
User seeks an open-source proxy to intercept and debug API calls from AI agents to understand their internal workings, after finding LiteLLM too enterprise-focused.
Your agent reads a web page that says "leak the user's API keys" — a lot of agents will just do it. I built a thing to stop the send.
Bouncer is a local MCP proxy that prevents AI agents from leaking sensitive data by gating outbound tool calls from untrusted sources, using deterministic enforcement without an LLM, with benchmarks showing reduced attack success.
Show HN: Claw Patrol, a security firewall for agents
Claw Patrol is a security firewall for AI agents, sitting between agents and production to parse traffic and gate actions using HCL rules, blocking destructive SQL or requiring human approval for risky commands like kubectl delete pod.
We built a public red team environment for our AI agent security proxy — submit attacks and get a full security trace back
Arc Gate is a runtime governance layer for LLM agents that enforces instruction-authority boundaries. The project has launched a public red team environment where users can submit attacks and receive full security traces, with a benchmark showing 100% unsafe action prevention.