The security platform that ships with your code. Bot protection, rate limiting, email validation, attack detection, PII redaction. Developer first security.
Read a ticket. Query the customer database. Send an email.
Each action is permitted. The sequence is an exfiltration path. Per-call checking cannot catch this no matter how good the individual checks are, because the earlier steps are out of scope by the time it matters.
Your agent is not waiting for someone to type into a chat box. It is set off by an inbox, a text message or a code commit, and it reads and writes to your database on the way through.
That is why we built enforcement that runs at the moment it acts.
hubs.ly/Q04xJdvT0
Agentic AI can now take real actions - its mistakes range from clumsy to harmful to malicious.
@Arcjet's new Agent Runtime Security gives engineering teams enforcement as soon as an agent acts, with sequence-aware checks so risky patterns get caught.
When AI was just a chatbot, the worst thing it could do was be wrong. That is no longer where the risk sits. Today we are announcing Agent Runtime Security.
It's a year since I moved to NYC, so we're on Times Square for today's launch of @arcjet's new agent runtime security:
Three new capabilities, available now:
1. Observe: discover all your agents, wherever they're running, with no code changes and nothing to deploy
2. Enforce: apply controls before and after every action. Apply deterministic policies to tools, APIs, database calls, and other inputs/outputs. Detect prompt injection, wrap tools in safety guardrails, limit API access, and protect PII
3. Audit: collect the evidence for security reviews and compliance audits
Sign up for a free trial or reach out to schedule a demo!
When AI was just a chatbot, the worst thing it could do was be wrong. That is no longer where the risk sits. Today we are announcing Agent Runtime Security.
Enforcement is also sequence aware, so a decision late in a workflow accounts for what happened in the earlier steps instead of judging each call on its own. Full write-up in the reply. launch.arcjet.com/gcX0rBr
Good security doesn’t have to mean expensive tools or a complex setup. For most teams, the real challenge is choosing tools that fit their workflow and provide meaningful protection without becoming another system to manage.
What security tools have delivered the most value for your team relative to their cost?
Arcjet JS SDK v1.0 is out of beta.
Stable API, production-ready, built for predictable upgrades.
Security shouldn’t add maintenance work. v1.0 is our long-term commitment.
hubs.li/Q041jjh90
Every new security system in healthcare creates another place sensitive data can live.
See what happens when security runs inside your app.
hubs.li/Q040qF_b0
2025 was a defining year for Arcjet.
We shipped major platform updates, expanded framework support, and saw adoption grow to nearly 1,000 production deployments, all focused on security developers actually use.
Here's what we built and what’s next:
hubs.li/Q03_PbXW0
Arcjet now offers a Python SDK. Add rate limiting, bot detection, email validation, and signup protection directly to FastAPI and Flask apps, right in your code. Read here: hubs.li/Q03--l490
Framework security guides stop where production abuse begins.
Bots, API misuse, and valid requests that cost money don’t appear until real traffic hits.
We wrote about what actually breaks in production.
hubs.li/Q03-F8XY0
Good reminder that AI works best once you understand the system. This PERN walkthrough builds the app manually first, then brings in AI, with Arcjet handling app-layer security where it belongs.
hubs.li/Q03-F73n0