CrabTrap: An LLM-as-a-judge HTTP proxy to secure agents in production
Summary
Brex open-sources CrabTrap, an LLM-as-a-judge HTTP proxy that filters and secures AI agent traffic before it reaches production services.
View Cached Full Text
Cached at: 04/22/26, 01:59 AM
CrabTrap: Secure Agents in Production
Source: https://www.brex.com/crabtrap Brex LLC is a wholly owned subsidiary of Capital One, N.A.
Brex LLC | 650 S 500W Suite 300 | Salt Lake City, UT 84101
The Brex business account consists of Checking, a commercial checking account provided by Column N.A., MemberFDIC(an unaffiliated institution), and Treasury and Vault, cash management services provided by Brex Treasury LLC, MemberFINRA/SIPCand a Capital One company.
Securities are offered through Brex Treasury LLC. Funds in Treasury are not FDIC-insured. Funds in Vault atprogram banksare eligible forFDICinsurance. Funds are not FDIC-insured until they arrive at program banks. Conditions apply.
Investing in securities involves risk and loss of money. Yield and return are variable and fluctuate. Past performance is not a guarantee of future results. This is not an offer to, or implied offer, or a solicitation to, buy or sell any securities. Brex Treasury LLC does not provide legal, tax, or investment advice. The latest statement of financial condition for Brex Treasury LLC is availablehere. You could lose money by investing in the Fund. Although the Fund seeks to preserve the value of your investment at $1.00 per share, it cannot guarantee it will do so. An investment in the Fund is not insured or guaranteed by the FDIC or any other government agency.
The Brex Mastercard® Corporate Credit Card is issued by Emigrant Bank, Fifth Third Bank N.A., or Airwallex (Netherlands) B.V. (all unaffiliated institutions), pursuant to licenses by Mastercard International Inc. Mastercard is a registered trademark, and the circles design is a trademark of Mastercard International Inc. The Brex Commercial Card is issued by Sutton Bank (an unaffiliated institution), pursuant to a license from Visa® U.S.A. Inc. Can be used where Visa® cards are accepted. No ATM access. All loans are subject to approval, including underwriting, credit, and collateral approval, as well as availability restrictions. Nothing herein should be construed as a commitment to lend.
Certain payment services are provided by Brex Payments LLC, alicensed money transmitter(NMLS #2035354) and a Capital One company.
Some Brex products have associated fees. Plans start at $0 per user, per month, and more advanced features are available for $12 per user, per month.
Similar Articles
Claw Patrol: an open-source security firewall for agents
Deno open-sources Claw Patrol, a security firewall for AI agents that routes traffic through a tunnel, parses protocols, injects credentials, and enforces rules to prevent dangerous actions like SQL deletions or kubectl commands.
Proxy for LLMs to learn how Agents works?
User seeks an open-source proxy to intercept and debug API calls from AI agents to understand their internal workings, after finding LiteLLM too enterprise-focused.
We built a public red team environment for our AI agent security proxy — submit attacks and get a full security trace back
Arc Gate is a runtime governance layer for LLM agents that enforces instruction-authority boundaries. The project has launched a public red team environment where users can submit attacks and receive full security traces, with a benchmark showing 100% unsafe action prevention.
@steipete: People freaking out over my AI spend. What nobody sees: Part of what excites me so much about working on OpenClaw is th…
A developer shares how they extensively use multiple Codex AI agents to automate PR reviews, issue dedup, security scanning, and more for the OpenClaw project, while also introducing Crabbox, a tool for remote agent workspaces.
Clawpatrol - security firewall for agents
Claw Patrol is an open-source security firewall that sits between agents and production, allowing users to write HCL rules to gate agent actions like blocking destructive SQL or requiring human approval for kubectl commands.