AgentSoap Security Manifesto
Our Commitment
At AgentSoap, we believe that security should be a collaborative partner to AI autonomy, not a bottleneck. This manifesto outlines our core principles for the "Edge-First" security era.
1. Data Privacy & Sovereignty
- Blind Mode: We provide tools to hash sensitive entities (emails, bank accounts, SSNs) at the edge before they are sent for semantic analysis.
- Zero-Training Guarantee: AgentSoap does not use client telemetry or payload data to train models. Your data remains yours.
2. Edge-First Philosophy
- Local Heuristics: We prioritize local, high-speed scanning to provide sub-5ms decision times for common threat patterns.
- Synced Intelligence: We push global threat intelligence to the local MCP client, ensuring that even in "Blind Mode," known malicious actors are blocked instantly.
3. Transparent Enforcement
- Actionable Telemetry: When we block an action, we tell you (and the agent) exactly why. We provide clear instructions to help agents self-correct and maintain workflow continuity.
- Fail-Closed by Default: In strict environments, we prioritize safety over convenience. If the security pipeline is unavailable, high-risk actions are blocked.
4. Continuous Hardening
- We are committed to real-time threat feed integration and stateful semantic interception to neutralize the most advanced Indirect Prompt Injection (IPI) and Social Engineering attacks.
For 3rd Party Auditors: AgentSoap infrastructure is designed for zero-trust compliance, utilizing HMAC request signing and identity binding for every security decision.