Arcjet

Arcjet is runtime security that sits inside the agent path, not at the perimeter. It discovers which agents are running, then enforces policy on prompts, tool calls, and spend: prompt-injection detection, tool-call authorization, PII redaction, bots and abuse, plus an audit trail of what happened and why. Coding-agent hooks need no SDK; custom agents use guard(); HTTP apps use protect().